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5 &ffi#m- 

♦»Hftlftlifp-§-r4N.Koblit2, V. S. Millerlc «t 9 m^^ttfc^MliBt-§-<D— 

15 ^c&^LTl^o rr-C^Rft^JL^iflc^P^Mtfi, ffiRMLhOfc-S^ 
^KiSS^T. «RftiK_b©j£i:fct. *SRft«S©^^m^Sr^tiS:<!0«aSrv^v^ N 

20 ftj»_b©iPfe©^i:Sr % t«IRft^±©2fIt^5« AIRllMSLh© 2&<oM 
Sstt2fc©«fc 5fcL-Cfh»^tL5 0 2/SSrfflSi«ftS:5l< <b ^r^ffi^^ifRft^i 

fclS*©^tti-5o ffiRft«SLb©^©2ffiF#ttJfe©J;5»i:UTW-||E*nSo ffiR 
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/B^£>*VC^.5 0 A.Miyaji, T. Ono, H.Cohen, Efficient elliptic curve 
exponentiation using mixed coordinates, Advances in Cryptology 
10 roceedings of ASIACRYPT' 98, LNCS 1514, Springer-Verlag, (1998) pp. 51-65 

-^^y S M iBY 2 = x 3 +AX 2 + x (A> BeFp) ^ 

P. L. Montgomery, Speeding the Pollard and Elliptic Curve Methods of 
20 Factorization, Math. Comp. 48 (1987) pp. 243-264. fcfB«$nTV>S 0 £*L 

(mP, (m+l)P)^^^©,m(2mP, (2m+l) P) 7bmt±&(Dia. ( (2m+l) P, (2m+2)P) 0 jg 
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oj^&*;£^— {gfr^^jfe;^ J.Lopez, R. Dahab, Fast Multiplication on 
5 Elliptic Curves over GF(2 m ) without Precomputation, Cryptographies 
Hardware and Embedded Systems: Proceedings of CHES' 99, LNCS 1717, 
Springer-Verlag, (1999) pp. 316-327. tCgE$fe^ttTV>§ 0 

«fc <o SKStefUf-f-S r. £ ^*ri£-C&-5^ 7— te^©J&9?5r^£fc:-£ 
15 ^Srir N t*^y||M^f(-It5 r^ST*t^\ Lt^ot, *>&7— -fflF 

vmffiH&Miz&tfzx*7-femntmmm<DMm&x\ 

if -r-s * *> 7 -mfW-jj&xh o r, mm* u ? -mMv&ftmn&w+m-i- 
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*-bita* $ R *i*K:i8V nt, 7 HUXtfltR MILL©** 9.^. 

10 *fe_hCB«lSr*fS-^ai:LT, *R AftUff #fc*5rt**fc 5 £LL©« 
PJ A«i(D^ * * 9 -ffiPA Sr tf * * 9 *H*tt**arefc o T. MfB^ 

*fc±«Btt*r**-«--™fc LT «Rft«WlF*K:feft5«*5^±©^|R 
*J:MS*,*:^=f* UIfflR^(:^, t% **?HKRlF*^=r* yiffi 

r ft*jr©**> b x * 7 hsf/s znntz * * ? -immxmxh^ x, mm* 

*±****Lfc*^ ya«Rft|»ic*jv^ **?H&Rt*^=o< y S || 
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H*/fc £ Mia^-^=r^ y mm r b^^^^^^^tt & xj^ 

xi z mm&xfizfflRx # 7 -mu t mm* > =r* v m$m ®m±<o& ufc 

m. t mm*> =r* v mRfts±©^^Df i>itj&<D*mmmizjstt & xmm%. 
u z mwMm^mm* % ? —m-M t mm* > y m*» r «_h©^ sr^ftn ufc 

25 *fc_LfE@#j<ir^1-5— L"C linftj||ll*#K:*5tt5««:5^Ji<3D^rR- 
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25 ^^tt^tbTty^^^^^^^pq^^^^ ^^^^^ 
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h ? ^iiir *j»±©^^ e> * # 7 — ffiF^c £f+n-r 5 ^ # 5 —flaFtw^fe 

10 y^m/vt/^. h^^M+fRftlti-^V^T^^^M^lSr^Tn-rS^^^^^^i- 
15 tfeot, busB^^i^^ h^MffRftH^r^^V yiH RftlftlcaSfei- 
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tfZM« % iR^*9HlfA^y^ ^ffl*R*«^©jfe«rlD||b*:jfeoJW« 
25 tSr^tpni:Sr«H»^i-5 0 

a±©£* e, * * 7 hm srsm-r s * * ? Him** &-e*> o r , mm v * ~ 
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sui/^h?* §y*f R ttH _L<D,& ^f,7*7 — flSF^C Sr fff If "T -5 ^ # 7 — ffiFSH*^ifc 



audits xffi«I>l^m]|B^^7— ^^^V yS»Rftlft_h©^Sr«||: 
LM©77^ >M^^*5(t§ xMtI£#;L, !7>T^/U'>3. h^M^RftHfe: 
*5V >T7 7 ^ ^M^fc :fc if 5 ^fcj&fll ^7y7i - 6 C«k 

20 mt-t&o 
n%^-tmx2bz> 0 
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10 

mi i ^^m(omimmm(D^^^^m\^n^mmm^m^ 
is mi 3 M p| Cl 4»^^^ lfIMtt , t§m -^^_ 

20 i-^n-^^-hglrfe-So 

m 1 6 ««pjcd^ 8 mmm<D^^^ M ^ m ^ *mm*7vm** 
25 ^ m i s te*mwcDm i o ittox* z7-®tm*-mz^? 

B2 0tt*» Bc j|i 2mfcflo^* 9HlFfW ^ fcfeft5ffiMl _^ ft 
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in 2 3mMm<D*%7— m\%^m^&n &m.mu7tJife%: 

5 HI 2 3 {»^0J(D||^(D^{c:#§^-f^g<D^!lI-efe6o 

io in 2 6 frt^pj©^ 5 ^»Jco^^? 9— fleFfUf^r&jcdsrtSJffiaiaTc^rife*'^ 

15 fc5o 

HI 3 1 (iI2 3(D^#-{k^«^*3t-t5M ! S(D^tLSr^-t-v'-^->'^HlT^<5 0 
HI 3 2(iil (DBt-^MS^^A{Cdoit?)Bt^-MS^fe^^-f 7 a— ^ — h 
20 "Cfc^o 

hi 3 3fini2 7 (DX%7-minmcm?%**7-l%^nX&&^i^Z7u — 
7j<i- -7 a — =f- -y — h hi -e h Z> o 

25 HI 3 5 te^BJ!<Dfg 1 5»#!lC7^# joft SM^TC^i^ 

hi 3 6 f«^0j(D^ i 6 mMM<Dx%7—mmxm^&i l ?&mmm7£3ffe% 
m3 7fc*%>m<DWii 7mmwox*?-f&&ttm\z&vzmm&7cJj&;* 
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5 ^t^u-^r-fg^s, 

_ 04 1 2 l««©«7H»««^K:i3^Sj9£Mr5E*&*r 
10 2f2**91*>jff2 2^jO^^MI^(.felt^ff5n^^ 

20 0 1 lWS« WBUc ^ t . fe5G ^o^/m^^g 
25 i *sj^s:i-s 0 

Pm+k ( 8 Q) - a (kQ) = Pra 

r©S:©Pm+k (aQ) OaQll «^LT*5^ A7j£*L 
fc^ yt^t4WMifcJ:orWW5^**LtV^5 ( a (kQ) Oali 
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tot, 01 ^^LfdBf^-/^^^a 101^ yfe— ^©BjP-^k^Jt^ 
ffl^SSha-tett* Pm+k (aQ) ^.I>*kQ^lt^LTtB^L, fc-S-ffcrtTttUUB 
V^f^lj:, MtaXtfkQi^-a (kQ)^ft^U (Pm+k (a 
5 Q) ) - a (kQ) %ftWlsXmj3iTZ>£?lZ.-rtblt «tV\ 

HI 1 (-^b/cBt-^/m-^-Mgl^S lOlli, ^SSIS llOt, fEtt£|5 12 0, 
l/v^^Bl 30^tttl^„ ^Sg&l 2 0(1 

ir-v^(D^^^fT5Bt^-/m^m§I5 1 0 2. ^/m^mMl 0 2 -?Hf-§--fb 

io ^m^k&ftowz&m^?*— ^^mw-f-^^yu^— mm^i o 3 t&m 

f5ltLTv^ 0 i^*^g|U3 0H Bt■8-^X{ia-^'^^S{^:*DV^•r^t^(D^ 

•*\ fangs 1 2 oicmm£n^wm&—ikmcmm-fz> 0 ft, mmm 1 0. u 

15 M^tZ^ m'WMl 2 Ofe, RAM, ROM^^lCiotiifSi 

01 (-^L.fcBt-^/«^S^Sl 0 1 ©t&m-oV^T^i-So HI 3 

20 B^/m^SSG 10 2 He Ht^k^S^tT^ 9 ^tefW^agB 102^ 
Ht-^/m^S^l 0 2^ ^ir-v^A^n^i: (3 0 0 1) % A^7$^ 

^xll (xl) |nfco;»Rttfcjb©yjfiaR0>te (yl) SrfW-fS. * 
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^^yiHRftt^ Byl 2 = xl 3 + Axl 2 +xl«tl5©T% rtbJ: 
1 0 2 tt s ^gg&a QSt>'Q(7)xJii, y 7 1 

03 ^ s " flS^/^aafu i o 2mm&&i$u ^n^^u^-m 

IW*10 3^« (3 0 0 2) 0 ^9-ffiPffJW51 0 3lt Q©xjB£IIU y 
U afKlCiS^^^-HSP^ (xdl x ydl) £ N ^H!jiaQ©xJffi*. y 
U aSfelCJ:5^^7*H8P^ (xd2 N yd2) ££ff-#L (3 0 0 3) N tf 
#$n^^^7H»^*l«#ft5AiSI*|Jl 0 2^m% (3 0 0 4) 0 Bf^b^SgP 
I02te s a&fen^^*7-ffiF/SSrffiv^ B£-5§-M3g£fT9 (30 0 5) o m 

xel % xe2Sr#S 0 

xel=B ( (ydl-yl) / (xdl-xl) ) 2 -A-xl-xdl --^2 
xe2=xd2 -^3 

Bf^/m^&rae 1 0 1 ttmp#/^^s§p 1 o 2 Tflt-^fbSftfc* y -fe-^ 

15 &mjj-tz>„ 

^/tfWl 0 2 ^Bf-^fc y-fe— ^jJSA^^tLSi: (3 2 0 

20 *tRM_b©yM«(Dj(t^it»i-§ 0 iHft^fc^yt-^xel, 

X e2©tv^ij t fc t ,, ^^^ys«B*^©^ ymm<om ( ye i) «b 

yel 2 = xel 3 + Axel 2 + xel^b#^n^ 0 ft. B, Att^n^tl^fc-Cfc 
§o tf/«t«il§|!10 2tt > yJMMcom UeU 7 el) 

ffiFtUWpi 0 3-i5 (3 2 0 2) 0 ^^7-^fh^gpi OSttCtttl 2 0^ 
25 *>8*f||rtt*0fc*ftiL. (3 2 0 3) % xfil, yffi*©fc % «SttflNR^&^^7 
-ffiF/S (xd3. yd3) SrW-HEL (3 2 0 4) N fWSftfc;**?^^*^/ 
tt**B£ttl 0 2-i£<5 (3 2 0 5) 0 Bf 1 0 2(1 iS&Hfc* 
tfT'-ffiFAfc/HWC, mSrWmkftS (3 2 0 6) 0 WHWbSi-Lfc* 
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X fl=B((ye2+yd3)/(xe2-xd3)) 2 ~A-xe2-xd3 -$C4 

m^agpi o 2nm-&ik£titc* yt—z?xfi&mzii-z> 0207) 

Btffc^lif 1 0 1 (D^tl^—feti^m 1 0 3<D&i,3S{-OV^fMi- 

WIS* 

10 HJ2fi N ^*7- f£f+it§& 1 0 3 (D^fg^ci ^^^b7t^Wefe§ 0 IH2 5 
tt. *#7 — fgf+^flSl 0 3cDibf^^Lfc%(DT?fe?) 0 

is5it*# 7 — fSI+»§R 2 0 2^\ 3»ff 3 ^ # 7 — ttS. tfUfr-g^t $ fb7t 

^ sHr~5?£, Effete £;ftfc^ yir-^x^^/fes+f RAI^_b(^YjM«©'fit-e 

15 2 0 2 lifitllot^^y'-f tfBfti±©^?5^*7-f^©^i©-S|5 
©itSrfUfLL 5 0 , ^©tf#&M«8*5£*fB 2 0 3{c-^x.5 (;* 

TJ//2 5 03) 0 m.mm7tn2 0 3«#^b^lfc^7J7— ^cDff^g^Lt^ATa 
£;txfet# Rtt^-hfD^J: 19 ^#7-^&©JM<^7n£?T^ 5 (^7^2 5 0 

20 JUrt LT^T^ (77-7/2 5 0 5) „ fetlfc^TJ 

J^T, Xjjy-mftmtl 0 3©i^3$7^7 7-^ff#t|5 2 0 2, mWMyu^ 2 
0 3}dol/>TV^<O7)^||»!j^fj£0Ji-5 o 

^ 1 <D^M#iJte, ^ # 7 — i^MU 103 #^ # 7 -Hild&t^E- v=M y 

25 Rft,f|JrcD,£P7>^ ^Er^=i> y M*fR T7.f ^J^I<D,&<t tt^ 

^temm^x-^fritc^ij^—fe,* (x d ,y d ) &wtnvmjjirz>h(D'chz> 0 

* * 7 —W.dJkl3^ is =f p« y &%H-t<D&?* J* 7J 7 -{£f|- Iff & 10 3 tA^] 

i-^i^7^7 7— {§fHSg&2 0 2^^n^Stt^^o ^^7J7-{^ff»^2 

0 2te^tf&-otc*$7~-md tJ5-x-t>titc^>=r?i vmm n&m±.<o&-pfrb 
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^ ^ =f p< V §M§R ft^&V JBjffi«T* $tLfd^^7 7 ~fg,£dP= (X d , Y d , 

z d )©&«©5*>x d £tfz d , W*jffi«t?«$nfc^^=r^ y^fRtia-h^^ 

(d+l)P=(X d + 1 ,Y d + 1 ,Z d + 1 ) ©M*0 5*>X d + 1< Rt5Z d+1 ^tm[U 

5 ©it^srffiaRic^aj 203 M^mTcM 203 ^fcMmoM 

x d> Z d . X d + lN Z d + 1 , x^.U?y <fc t)^e>=rV !)WfcmhmK$3^TT7 4 
^mMX*&£Hftx# ^-f^ dP = ( Xd> y d ) ©ffifli x d ^o? y d ©«7nSrfT* 5„ 

10 Miliar aw^y.x d .z dr x d + 1 ,z d + 1 *^fen*:»^icx d .y d 

ttj 7J -f 5> M^StgIHS (E^Sfco V n Tgftgli -f § „ 

* 7 — ffiF^<jp= (x d , y d , z d ) ©in© 5 *,x d Rtw d . Mmmmxm $ nfc^- >- 
^ys«Rii±©^(d + i)p=(x d+1) Y d+1) z d+1 )o«fo5^x d + 1 s 

15 UZ d + ! „ ;* # 7 ~HBFfff-3l«B 10 3 id A7J $ nfc^e >- =V y MftR ftj»_b©^cp 

y §y*t r &m±(DMP<DT? -f (x, y) x\ M&mm& (x 1 ,y 1 ,z 1 )v 

20 ^7 -HffjSdP© 77^ ^ffiH £ (x d , y d ) T\ J* jgffi* £ (X d , Y d , Z d ) XZzM 
tb^-To * > y M«R ft^-b© A (d-l) P©77 ^ >M«^r (x d _ j , y d _ 1 ) 

-c% mmm&(x d - 1 ,Y d _ 1> z d _ 1 )^h^jti^i- o ^>^vyMttR« 

±o*(dn)P077-f>m(x d + 11 y d + I )-c, «*l*&0[ d + ll y d + 1 , 

z d+ i)T^tb^tb^-r 0 

T^S^l 1 0 2IC*5V>TT 1 -Z d ^tH|[$^ <5o irti/^^TifcfiXdX* 
fe$9£tL3 0 ^y^l 1 0 3JC*3V>-CZ d X X3 6StH|[$Jx % l^**T 2 {w*&$3 



25 
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2 tem&£nZ> 0 ^yZfl 1 0 5^joV^TX d + 1 XT 2 «$tl5 0 
rr-CU^^T 2 IC teX d -xZ d ^*§-$D ^ tLT*5 ?) s L^orX d + 1 (X d -xZ d ) 

XT 2 (D2 mtmW. £ tL§ 0 £ £ -Cl/S?^ ^ T 2 fcLfii (X d -xZ d ) dSfett $ *VT:i3 

9, Lfc^oT(X d -xZ d ) 2 ^f+Jf£;ft.5 0 -t©*S*3a5^^^T 2 lJ:«rtA$tt 
^y^l 1 0 7{^*3V^TT 2 xX d+1 ^f|-^$tL'5o ::t*^^T 2 
KfctCX d -xZ d ) 2 ^*&^^^-C^t9 > LtiJJoTX d + 1 (X d -xZ d ) 2 ^ff^$tL^> 0 
^©»^^^T 2 t^$|i5 0 X^y"?! 1 0 8m>tT 2 xZ d+1 



10 ^tf$tl?>o £ 



2 (-ttX d + 1 (X d -xZ d ) 2 ^^^^x*5t9 , 



bfc^o"CZ d + 1 X d+1 (X d -xZ d ) 2 ^f|-^^tL§ 0 ^©^l/^^T 2 (Cft 
T 2 KfiiZ d + 1 X d + 1 (X d -xZ d ) 2 dmjm£thT&iQ . Lfc^ 0 -CyZ d + 1 X d + 1 

(x d -xz d ) 2 ^ff-^$tb5 0 -t©3ft*^ui?^^T 2 »j:*Mft*ixSo ^tj/^i 

15 1 1 0tC^3V^T 2 XBiSff#$tbSo --^l^**T 2 K:friyZ d + 1 X d + 1 

(X d -xZ d ) 2 $m$i£tLXtey , Lfc^oTByZ d+1 X d + 1 (X d -xZ d ) 2 ^ff^$ 

^©iiiis^^T 2 fj:feiji»i$iis, i i im^T 2 x 

Z d ^*j-jt$^5 e r r-ei^^^T 2 i-fiByZ d + 1 X d + 1 (X d -xZ d ) 2 
n-Cd3f9, U^oTByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d ^ff^$^§ 0 

20 U^^T 2 t21«K|ft$n5. ^^2/7°l 1 1 2{C*3VNXT 2 xX d 3JS?Hr$tLSo 
r ^-e^v>^^T 2 fc«ByZ d+1 X d + 1 (X d -xZ d ) 2 Z d iS«HW$nT» <9 , bfd 
^oTByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d X d ^t}-^^^^ o l^** T 4 

Kl*&*fc&*L3o 1 1 3(^VXT 2 xZ d ^||-f $^§ o i;x'^ 

^T 2 ^ttByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d £SfejfA $tlT*5 <9 , bTc^oT 

25 ByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d ^ff-^:$tl§ 0 * T 2 tetfctt $ 

tL^o i i 4}^:*DV^TWv ? ^^T 2 ^7c^tf^^tl5o 

^^T 2 t^ttByZ d + 1 X d+1 (X d -xZ d ) 2 Z d 2 $ tLT*D 5 % UiSoT 

l/ByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d 2 ^ff^$n^ 0 t©i^v^^T 2 l« 

$ttS. l i 5^*5v>TT 2 xT 4 ^n-^$ti/So -r- 
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20 



25 



T 2 fcm/fiyZ d + 1 X d + 1 (X d -xZ d ) 2 Z d 2 ^l/^^T 4 fc«ByZ d+1 X d+1 
(X d -xZ d ) 2 Z d X d ^^r^tL^$tiTjo!9 % Lfc#oT (ByZ d + x X d + x (X d - 
xZ d ) 2 Z d X d )/(ByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d 2 ) (=X d /Z d ) j>mW£i%Z> 0 ^ 
»*#^^x d |t»#i$tL5. *Ty7l 1 1 6fc*5VN"CT 1 xZ d + 1 ^W- 



Z d + 1 (X d x-Z d )^ff#$tL5o ^©M^S 



(X d x-Z d )^^$tLT*5«9 % L-^^oT(X d x-Z d ) 2 ^fH»$tl§ 0 ^©M^S 



10 



a iM(X d x-Z d ) 2 ^^^^T 2 {Cttl/ByZ d + 1 X d + 1 (X d - 

xz d ) 2 ifizti^intm £ ht*$ 5 , ut # o r (x d x-z d ) 2 /B y z d+1 x d + 1 (x d - 

xZ d ) 2 Z d 2 ^ff^^^So *©fe*^^^^ T2 j cftjtt$;h/So 

1 1 9fca8^TTa+T 4 #tt*S;h,a 0 ^t^n 3 tax d+1 (x d - 

xZ d ) ^V^^T 4 JCttZ d+ i (X d x-Z d )^-ttL-^tL»*ft$nT*5t), Lfc2*. 
oTX d + 1 (X d -xZ d )+Z d + 1 (X d x-Z d )^ff»$tL-5 0 ^C^Jl/^^T! 

^^T 3 {C«X d + 1 (X d -xZ d )^l^^T 4 iC«Z d + 1 (X d x-Z d )^^tl^tL*& 
^$tLTjo«9. ^^ oTXd + 1 ( Xd -xZ d )-Z d + 1 (X d x-Z d )^fP»^^ 0 
W^^l^^^^TgtCt&^^tLSo 12 1 m^TT! XT 3 ^ff 

#^tt5 0 ---ei^^^T 1 {^«X d + 1 (X d -xZ d )+Z d + 1 (X d x-Z d )^u^^ 
*T 3 MteX d + 1 (X d -xZ d )-Z d + 1 (X d x-Z d )*SJE:tuJeti4&tt$tLT^5, Lfc 
^^-C{X d+1 (X d -xZ d )4-z d + 1 (X d x-Z d )}{X d + 1 (X d -xZ d )-Z d + 1 (X d x-Z d )} 

tT lX T 2 «$tl5 0 ^-^ l -^^T 1 ^«{X d+1 (X d -xZ d ) + Z d + 1 
(X d x-Z d )}{X d+1 (X d -xZ d )-Z d + 1 tt d x-Z d )}36SU^^T 2 tCtt(X d x-Z d ) 2 
/ByZ d + i X d + x (X d -xZ d ) 2 Z d 2 &*tl?tl&m tSthX3o<0, L o T 
fel {X " ~ xZ ^ + Z ^ (* d *-Z d )} {X M (X d -xZ d )- Z d+1 (X d x - Z d ) }{X d x - Z,) 2 

Byz d+ ,x d+l {x d -xz d fzl ~ ~ 

... ^5 
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timW-ZftZo ZO^M&y d m«HW$*L5o x d te.&xTy?l 1 1 5lc3s\,^ 
T(ByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d X d )/(ByZ d + 2 X d+ x (X d -xZ d ) 2 X d 2 )^*& 

JifB^JlRiCj; ^m¥M7U^2 0 3 ^ZLbftfcx , y, X d> Z d , X d + 1 , 

5 z d+1 ^b^v^ vmn w&m\^nz>*tij-m&<DT7^ «(x d , 
y d )i-*5^§{t/5^-cm7c^tL§a^^T©a i 9i?fe§ 0 ra N ,&(d+i)p«,£ 

dPid^P^^ Lfc^-Cfe 9 % (d-l)Ptt^dP^»^^P§rM^ L./c^-efe-5 0 

10 {A + x + x d +x d _{){x d -xf =B(y d + y) 2 - Wil 

( x d-i - x d+l )(x d - x) 2 = 4By d y ■■■ g£ 8 

ya = O rf -i - X* rf - *y/4By • • • i&C 9 
15 t^5o rrTx d =X d /Z d , x d + 1 =X d + 1 /Z d + 1% x d _ 1 =X d _ 1 / 

y d = (X d _ } Z d+1 -Z d _,X M \X d -Z d xf /4ByZ d _ x Z M Z 2 - & 1 0 

20 x m+n = z,„_„ [(x„, - z m xx n +z„) + (x m + z„, x x„ - z„ )f - 

Z m+ „=X m _„[(X m -ZJ(X n +ZJ-(X„,+Z m XX n -Z n )] 2 - mi 2 

^?fc3 0 r r-ex m s.i>'z m «^>=v yM*tRft^±©^p©m^^mP(D#f^ 

3 XJ^|l&t>*ZM*Ji, X n ^^Z n ^-e>^V RA^JKD^POnf^ 
25 ^nP(^ttf^^^fe^SXMSLt^Zffi^, X m _ n &^Z m _ n }i^^=^ PMtfR 
ttl§Ut:<£> £,P(D (m-n) (m-n) P^Wf^ffiS(c:io tf % xmMRmmM. X m + n R 
Zm + n «^ > =f* V mm R ttfcJbO^P© (m+n) ffiF/g (m+n) P©l*Jl«9tte*$»* 3 X 

Z m =x m > X n /Z n =x n , X m _ n /Z m _ n =x m _ n &*&<Db&, X m+n /Z m+n 
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^,-„ = Z m+ „ [(^„, - Z m )(X„ + Z„ ) + (X„, + Z m )(X„ - Z„ )] 2 -|13 
=X^,,[{X m -ZJ(X n +Z„)-(X m + ZJ(X„ -Z„)] 2 ».* 1 4 



m=d, n= 1 <h bT_bfS2^3rffiV >T y d ©5£ £ 9 X d _ 1 &t>*Z d _ j SrM* U 



x d =X d /Z d T?£>5#\ ^7C^»<DlH]^^j^^>-r@^]T'y d ©^-#<til^-r^r 

5,z d+1 x, +1 z d( x,-xz,) 2 z, mib 

bf^ 0 ^i-e N x d) y d te!Hl 1 tf^SkiJ; ^-^^b^TV^^> 0 L^oT, 

t ^ a >mm (x d , y d ) (d m x mjn $ n x v > § - 1 \c z> 0 
±mmnte*Tv^i ioi, ^yr/i 103, ^^i 1 0 5, ^ y 

~f\ 1 0 7, ^7^1108, .X^y 
:/l 1 1 1, ^f^^l 112, XTl/ifl 113, ^T^^l 115, 
1/1116, ^^l 118, ^^5/^1 1 2 l&O^^r^l 1 2 2 Jiljo^ 

xmmfc±(Dmnmm-m*>&mb-rz) 0 ^7^/1106^7^/ 
1 1 1 7 ic&\,^xmm±(D 2mn(Dtmm&&mt-f% 0 ^r^/i 1 
1 4fc&\,^xmm±<DmnWim<DnwAz>&mb-tz> 0 mm±(Dijm^m 

t&^xik&ttsh&\,^<Dxi&mi<x^£\,\ mm±(Dmn<Dwt»m&M, m& 
mutzi 5M+ 2s+i ©w-Mt&#K£i-5 0 itittflsa[^*7-tttnt©tF 



5 X' m _ n /z' m _ n %^ 




^ + .^ + .(^-^) 2 z rf 2 



10 



-••ifc 1 5 
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&xiJ7—fe&M.<Dft&-Skte$s&&Z: 1 5 0 OMmkM^mh hfoZ> 0 S = 0. 8 
M s I=40Mi HsiM'irZ) t MM^M.7^<Ot{%Wit 5 6 . 6Mt?fc!5, S5|^*7 

10 £S 0 

2fcteBI4fc:J:t>. ^^HttdX^^^ ys*(IPgft3»Jh©/SP^e>^ x d , 
=M yM*fRftl§Lh©,&P£A;fr U KT©¥)Rl!:J:!)*y^ y^tf n Affile 

15 *5VN-Cltf^MHT^^tLyh^^^— ^dP=(X d ,Y d ,Z d )<D5^X d S.t>*Z dN It 
$ tlfc^E ^ rfpt y §!*f R Eftl§Lb©,& (d+1) P= (X d + 1 ,Y d + 1 ,Z d+1 ) 
(D$ibX d + l Rm d + l &mjj1rZ> 0 xr-^4 0UU, X* I tc^OSitt 1 
«:ftAi-5o ^75/7°4 0 2iU, ,6P© 2{gv£2P£ff-JM- S„ 

i*»M«ifc*5v^(x f y ,i) t ttsu y stun ftj»©*t*jffiait2: 

20 itS 2mn<D4S£&m^X 2ffiF/£2P«rf|-JH-5o 03 t It, ;*7J^ 

— ffiPK-jfffil 0 3(-A^7$tl^fRftH±(D^Pi^^5/^ 0 4 0 2X*&tb1Z&2P 
£r N ^©*a(P,2P) <b LTMtSo ii"C^PX^2PW:|tj^Mai-C»$n-rv^ 
So ^r^404iU, t^*7-»f> hfit^-tt^^^ 

5^i^U -StM77>^4 13^<. -iUftM^7S'7 1 4 0 

25 5^t< 0 7>7-7^40 5iLT, I Sr 1 *S*0$*S o ^7y/4 0 6 iL 

Tx ^7j^— m<D if i©ifs/ hoft^o-efes^i -efes7j^^j^-rs 0 -t© 

fcT ^ h ©{jf/jS 0 XfofrUt^T y/407 — < o ^© tf b ©jS^s 1 X*&thl-£^ 
7^4io^<„ ^7^4 0 7iLt, tt*ffi*fcJ; 9*$n*:^©iia 

(raP, (m+1) P) 7> b ,&mP £: (m+1) P©AQ^mP+ (m+1) PSrfirfcV\ ^ (2m+l) PfrtYMiT 
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R*^©m^^ft^iP»^^V^Tf+^$tt-5o ^^7° 4 0 8^ LT, 
M&mmfc£ <9*$n/c^£Da(mP, (m+l)P)^b,£mP<D2{£3f 2 (mP) £?T#V\ 
^2mP§rff^:i-^ 0 ^©^^^^^4 0 9^t< 0 ^^T\ 2j^2(mP)tt, 
5 ^VyMffiRft^^lt^M^*o(t§2^(D^^VNTff#$tt§ 0 

y"4 0 9 t Lt, ^fy7*4 0 8-C^fefc^2mPi:^^ ; y^ 0 4 0 7^fcfc^ 
(2m+ 1 ) P§r,&<D,1fi(2mP, (2m+ 1)P)^LT, ^©«l (mP, (m+ 1 ) P) (Dftfr 9 {dfefft 
i~^o W7f^4 0 4^I§ o riT% ,£2mP, ,&(2m+l)P. ,&mP&U? 
^(m+l)P^^Tlif^^}c:4oV^T*$tLTV^-5 0 ^^^^4 10 t Lt, £H0 
10 MM \C X <9 * ^fcl,©|l (mP, (m+ 1 ) P) fl» t, j&mP <L,£ (m+ 1 ) P©^p^ m p+ ( m + 1 ) P 
Sr=fT^V\ ^(2m+l)P^f|-»i-§ 0 ^:©tI^^-/^4 1 1^t< 0 r:t\ #D3I 
mP+( ra +i)p^ N ^E-^rf^ y MI»R ft^©Mf^llte:*5it 5*DlP^£J^-cftJS 

^fj//4 1U tt, ^jM^(C«tt)^$^c^(D|a(mP, (ra+l)P)^ 
b,&(m+l)P©2fg|f2((m+l)P)£m£V\ j£ (2m+2) P^ff#i~§ 0 ^©f^f^ 

15 /4i2^< 0 2f^2((m+i)p)tt N ^r^=o< v mmpimm<D%$Bj& 

mi^iotfZ) 2f£#©^5££J3^TffJ|£ti,.5 0 7f^4 12Ht, ^"r yzT 
4 1 0 -C^^Vc ,&(2m+ 1 )P£ 2/^4 1 1 X~Jkfrfc& (2m+2)P£,&<£>|a 
((2n)+l)P, (2m+2)P) £ LT N ,&(D|fi(mP, (ra+1) P) ©ffcfc *3 tdt&j^-T So ^©#^ 
5'7 1 4 0 4^I5 o CiT\ ,£(2m+l)P N ,£(2m+2)P N »^(mH)P|j;it|f 
20 ^^l21*3V^*^tbTV^ 0 ^^^7°4 1 3 t LT, tt^M^T^$^fc^(D 
MCmP, (m+l)P)a>^ ttJ^M^T'«^n^mP=(X m ,Y m ,Z m ) c J;?)X m ^Z in ^ 
Wmx d X(j!Z d aT, tt#^^-e^^tL^(m+l)P=(X m+1 ,Y m+ll 

y Rftli©lt^^{cdo}j-s*p^5t;©f+^i«, z 1 = i tt 
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<D^^(Df-\rMMn, 3M+2Stfc§ 0 =?— i$.<D I # g CO t"> f CDjjg^ 0 T? 

Off-^ft^^^^§ o f^fc*) 6M+ 4 S ©ffMMSi 
5 CD imWl(D\?y hCO\m i l -C$)Htt\ 1 0 ^^TAD^CDf+Jf:!:, * 

T>^4 1 1 ^^3V^T2^S : #©f+^i^^i : / c^ -§ o f/^6M+4 S CDs+H 

fi^^T-fc^o v>Ti^o^^joV^T^ 6M+4 scoi+^ft^^-efe-5o ^ 

7^/404, ^7^^40 5, ^7^/4 0 6, ^7^7*40 7, ^^^X^ 
0 8, ^7 5/^4 0 QMi^Tj'^ 0 4, ^7^/4 0 5, ^7^/4 0 6, 
10 *Tv^4 1 0, ^yX4 1 1 , ^Ty^A 1 2 CD|| 9 bCDIIltm, (^^7 
|j£d(Dt> h«) — 1 iHl^^Sco-e, ^T5'7°4 0 2 "CCD 2 {g^CDff 
#ltJvlAn5^, :£#<Dff^*te (6M+4S) (k — 1) +3M+2Si*5 0 
^ ^kte^TJ^-fitdCDtf -y hMX~&Z> 0 — Incite, f+|t*Ste, S = 0. 
8M@jgirM^b^5<D-e % ^cD=+^4fi*5*5j;^ (9. 2k — 4. 6) M 
15 mmtxjj?—' fitd^i 6 0 fc'y h (k=l 6 0) Xfothi^ _hffi^JlR 
COT/l^^y XAcDff»fi«j3*5j;^- 1 4 6 7M£&5 0 ^*7-fd©t'^ hfe 
9 CDftW-Mb Ltli*D 9 . 2Mi^ 0 A.Miyaji, T. Ono, H.Cohen, 
Efficient elliptic curve exponentiation using mixed coordinates, 
Advances in Cryptology Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) 
20 pp. 51-65 Rite, U^jVi/^ h^xmm RttlfHC^-C, >7^K^&£/B^ 

try bfofc9 cofrlTAte&doJ;^: 1 0M£ JMUfc b^t-5 0 ^J^te^TJ 7— fitdj&s 
160tfyh (k = 16 0) -Cfente, w©^*7-HSFtHt*tSfe©tmt*»i*543 
25 «fc-£rl 6 0 0M£&5 o Lfc^oT, _LfB3MI© T^=T y X^CO^-^f+^^S/^ 

tfe, ^*9—|SdRtft^=f^ yM#IIRft«Ui©jfePd»e>, X d , y d> X d + 1 , 
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»11 5M+2 S+ I mtti^^^7T*-f&fi-jf$P2 0 2(?^B^5I*;&^- 

^«Ff^J^fc:i&Kfcff^3^*© (9. 2k— 4. 6) MtKlJfc^TttS^fcl/hSv^ L- 

0M, S = 0. SMHSm^, n©W-»ttfc43«fc^ (9. 2k + 5 2) M 
kMM*>Z>Zb&-?% Z> 0 m^^^J^—md^l 6 OfcTy h (k=l 6 0) X- 
htlii, ^©^^^-ffiFW-JUCifi&SftW-Mttl 5 2 4M£fc<5„ tjfRftlti: U 

ii«^^7-f^ff»g|5 2 0 2m^ltJ&5. *a^*7«H»ifJ|[«P2 0 2 

«©5t>x d xtra d ; »«je»T?**n*:*>=f>« yifflRfti±©^(d + i)p=. 

tt d + i»Yd+i.Zd + i)®^S«>5 ^>X d + 1 ^.Z>*Z d + 1 ^f+#L, 

^*9H»jftdP-Cx d .Y df z d )<ojem d ,Y d 2ltt« d ©«5E^fT*5. 
*fcH9fcJ:5 % Mfe yX d . Z d . X d + 1 , Z d + 1 #4ML&ftfc»*fcX d , 
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# 7 HSF^dP= (X d , Y d , Z d ) 0>J@E«© 5 hi d S tJ«Z d , a*H«ftS-e* £ ;*X7c^ >- 

=M ya*Rfti»±©^(d+l)P=tt d + 1 ,Y d + 1 ,Z d + 1 )0jffi«0 5*>X d+1 2fe 
5 t>'Z d+1 , ^^77 HSHH-#SB 10 3 m A7J $ tLfc^t > =M y M*f R ftHLLO^P 
^77^ i'jffiStt?* Lfc (x, y) £ A73 U WT^JlRT'^M^C&V >T^*Jffi 
i^^i £> tLfc ^ # 7 — f£,& (X d ,Y d) Z d )^tt57Ji-^)„ T?A^J £ fttc* > =f 

10 # 9 — ffiP^dP© 77^ fmm& (x d , y d ) X\ M&mM £ (X d , Y d , Z d ) X^tl^tl 
Wtir 0 U IfflR ft^l©^ (d-l)P©7 7 ^ ygt ?r (x d _ ! , y d _ x ) T\ 

ttf^^ ; ir(x d _ 1 ,Y d _ 1 ,z d _ 1 )^ti^^-r 0 ^v=o« vmfiiw&m±<D 
,^(d+i)p©77^ vjm^^t (x d + j , y d + 1 ) t\ mmmm* (X d + ! , Y d + ! , 
z d + 1 )-r^ti^tL*i-o 

15 ^^^^9 0 1 ^o^-cx d xxfimw-zn, ^^Tjtfe^nSo 

S^9 0 2fc*5V^T 1 — Z d ^Sff-3([$tLSo rrt^^^TjflfiXdxM 

0 4{CjoV^-rX d -T 2 ^fi-^^tL-5o rrtI/^^T 2 t(j:Z d x^ 
20 M^iXtjo^ bfc^ 0 xx d -xz d ^fl^^n^ 0 ^(D^^ ^T 2 C 

^§^5o ^^5/^9 0 5\zm^xz d+1 xTi^j|$ns, rrtv^ 

* T ! ^ttX d x-Z d ^S*&#fi$tbT*3 , Lfd^ 0 -CZ d+ ! (X d x-Z d )^fffl[$n 

T 2 £ft5o ---ei/v ? ^^T 2 (Jl«X d -xZ d ^^^^x*3«9, bfc^S 
25 oTX d+1 (X d -xZ d )^|[$n5o *©JBf*iS^^^T 4 fc»*rt$nS, * 
7^79 0 7{d*3V^TT 1 <^2^Sff^$tLSo :CT*^^T 1 tiiX d x- 
Z d *Sfej^$tbT^t), U#oT(X d x-Z d ) 2 i^I^5 0 I' 
^^TilC^^^o ^7^5/^9 0 8 tC&^TT 2 C0 2 3l36StH|[$nSo — 
tl/^^T 2 tdteX d - xZ d asfcjjft £tlX&<9, bfc jSS o T (X d -xZ d ) 2 ^f+3f 
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#oTZ d (X d -xZ d ) 2 mintSftZ> 0 t©S^l/^^T 2 (M^iiS 0 
^^^7°9 1 0m*5V^T 2 xX d + 1 ^tH|[$tL5o :if^^T 2 i:|i 
Z d (X d - X Z d ) 2 ^^$tLT*5«9, ^^^oTX d + 1 Z d (X d -xZ d ) 2 ^ffm$ 

z d + 1 ^ff^$ti5o ^^-e^-^^T 2 jc:x d + 1 z d (x d -xZ d ) 2 ^^^nT 
*stK ^fe^^^Zd + iX d+1 z d (x d -xz d ) 2 ^ff-^ $ ^§ 0 ^-ois^i/^ 

^^T 2 jctaz d + 1 x d + 1 z d (x d -xz d ) 2 ^*Mft$nr4sD, Lfcaso-c 
y z d + iX d+ !Z d (x d -xz d ) 2 ^f+^:£;ft,&o ^©jg^six^^^x 2 tc^-^$ 

tL5 D ^Ty^9 1 3iC*5V^T 2 XB^ff-^^^ L< 5 o ^ Ct? l/>?^ ^ T 2 fcfi 
y z d + iX d + 1 Z d (X d -xZ d ) 2 ^«rt$tLT*3|? % bfc^oTByZ d+1 X d + 1 Z d 
(X d -xZ d ) 2 ^rl-^$tLS 0 ^©^l/^i?T 2 M$n5 0 ^^s,7» 9 
1 4fc43VNTT ? xX d *fW*ix6o "^^**T 2 UlttByZ d+1 X d + 1 Z d 
(X d -xZ d ) 2 ^^^^Tiot9. bfc^oTByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 X d 

§H*£*l5 0 -^-e^^^^T 2 }e:«ByZ d + 1 x d + 1 z d (x d -xZ d ) 2 ^|&irt^tL 

T*50. bfc^oTByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d ;W3f £^5 0 
* s I^^^Z d fc»tt$tbS. ^Tt/y9 1 6Kl:io^TT3 + T 4 ;5Sf-f-^r$tl / ;5 0 

^d-ev^^TgicfiZd + i (x d x-z d ):flsw^^T 4 tcw:x d + 1 (x d - x z d ) 

*s*«ft*jXT*J9 % ^* J oTZ d + 1 (X d x-Z d )+X d+1 CX d -xZ d )*tWJ|[Sn 
So -5-©^M* s ^^^T 2 ^*S-jW$tl/5 0 ^75/7°9 1 7 fd:fo^TT3-T 4 
^W-JF$n*„ rr-C^?T 3 fcttZ d + 1 CX d x-Z d )j&S W>**T 4 K:tt 
X d + i (X d -xZ d )dS*&^$nT*3t) N bfca*oTZ d + 1 (X d x-Z d )-X d + 1 
(X d -xZ d )^f+#^tl§o j e^^^^^^T 3 }C^^^§ 0 ^fy/g ! 

^^T 2 (CfiZ d + 1 (X d x-Z d )+X d + 1 (X d -xZ d )^*fcjft$^-r*55, Lfctf* 
oT{Z d + 1 (X d x-Z d )+X d+1 (X d -xZ d )}(X d x-Z d ) 2 ^|4-^$^-5o 
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cr-rvv ? ^^T 1 (^i{z d + 1 (x d x-z d )+x d + 1 (x d - x z d )}(x d x-z d ) 2 a* 

U^^T 3 fc»3:Z d + 1 (X d x-Z d )-X d+1 (X d -xZ d )^*&#ft$ttT*3«3s bfc 
dSoT{Z d+1 (X d x-Z d )+X d + 1 (X d -xZ d )}{Z d + 1 (X d x-Z d )-X d+1 
5 (X d -xZ d )} (X d x-Z d ) 2 ^fj-^$tL^) 0 • : e(D?gm^l-'^^Y d ^^$n-5o 
Lt^otV^^Y d iai{Z d + 1 (X d x-Z d )+X d + 1 (X d - X Z d )}{Z d + 1 
(X d x-Z d )-X d + 1 (X d -xZ d )} (X d x-Z d ) 2 /$^*fl£;ft,-tV^o \s*J*jni d \ZL 
te^T-y^Q 1 4(-*5V>TByZ d+1 X d + 1 Z d + 1 (X d -xZ d ) 2 X d ^^$^ ^ 

10 ^9 1 5^*5VTBy Z d + 1 X d + x Z d + T (X d -xZ d ) 2 Z d £ *l. *<D&Jl 

-hfB^llRfclJ: 9-^^ibtLfcx. y % X d> Z d . X d + 1 , Z d + j frh^* ^ — 

© tti^ ^ (x d , y d , z d ) »t s im^xm^t & ti 5 a & i-zsjjr ©ai «9 -c & & 0 

(d+1) PJi^dPt^P^Plf L ti&Xfr <0 „ (d-1) Ptt,&dP/0> b ,&P£MJ|l b fcjfe 
^ t 9 ^*5o r^T^x d =X d /Z d . x d + 1 =X d + 1 /Z d + 1% x^^ 

x d _ 1 /z d _ 1 Tfe^ r. (Dm^ttA-r Z> Zbiz.£V) #MI©fi^ b m&irZ> 
20 =e> =o< y mm R ft^©ltf^li?<DAp^:^«^ lis i5c i 2 -efc 5„ ~ r 

-CXnRTM^te^^^* y M*f Rft^_hO^POm^mP(DMf^ffi^(eijo{t^)XM 

K&ttzmm&mmM. x m _ n Rm m - n te*^=t* vmflm&m±<D&p<D 

(m-n)fg,& (m-n) P<DM&fMMlZ.&tf ZXmW&miMm, X m+ n Xt^Z m+ n >- 
25 =f y Mff R ft||Lt©,&P<£> (m+n) fff^C (ra+n) P©ttJ£Mlfc:£ SXMtl&mMim 
T»&<9, m, n«m>n ^fci-IEM^:-Cfe^ 0 i©5£teX m /Z m = x m , X n / 
z n = x n , X m _ n /Z m _ n = x m _ n ^^^^^ N X m+n /Z m+n =x m+n %^ 
mbt£Z><DX\ M&m.mX<D'£?£b Lt P^f^TV^o il4, ifcl 

5<t*5<£ N C<Z>5£-eX m /Z m =x m , X n /Z n = x ns X m+n /Z m + n =x m+n jd$ 
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r m _ n /r m _ n ^*i4« 0 s*:, x' m _ n / Z ' m _ n =x m _ n / 

*U X 1 =x,Z 1 =li:d3< -tJ C J:»j s mi 5&#$„ x d =X d /Z d 
5 y d ©#«£ii#-f-£- t^.t^ Sfci 6ift5 0 

7 rf = {Z^C^x-Z^ + JT^CJ^ -xZ rf )}{Z rf+I (A>-Z d )-^ +1 (^ -xZ d )}(X d x-Z d y 



-mi 7 

Byz M x*«ZAx d -vztfx 4 -Ski s 
^.^A^-^)^,, -in 9 

lc«tt>K*rr*iHfJ:v^ -^T% x d , y d , z d fiH9©toSKJ: O^^ttrv^ 
§o LfcdSoT, WM«(X. d ,Y d ,Z d )0«S^-c^^ ix - rv , i5 > : ^^^ So 
15 ±E#ISli7fs'^9 0 1, ^f^9 0 3, 77^/9 0 5, ^f^ 90 
6. XTy?9 0 9, ^^5/^9 1 0. XTy79 1 l s 7Ty/9 1 2, 
>^°9 1 3, *Ty^9 1 4. ^T7/9 1 5, 1 8 ^^^3/^9 

^ssr^S 0 8lC*V^*|^Ji©2i|^OfMi*SriWi:i-S 0 *PSfr±(D*D 
20 *XtJ«»©ffH|[4«c N ^TPS#:Jb<Dm#(Dtf#» % 2*»©fH|[*tJt^TJfctt 

<E>tH|£ *Sr StfSt, _hf3#JlIM« 13M+2S OH-ft^Mi i~3 0 ^*Ui 

e 0 e> n&x*7--mwn<D9m*m$*$£*i 5 0 oMiit 

25 a^^tlSo S = 0. 8MttmiMll7U©ftItttl 4. 6Mtfe9, 
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5 mz x a*?— mRx&e>=** vMimmm±<D&pt>*^ x d , z d , x d+1 , 

=Erts**yWMmmm±<D&Pi>»t>. x d , z d , x d + 1 , z d + 1 £tttfr*-37vi'=r 

§152 0 2 iC*5V^T_LfBT/V^y XA^ffll^< tt>, ^ X7 ^ —ISdRTJ^ =T 
yStlRli±©,^^, X d , Z d , X d+1 , Z d + 1 ^|±|7Jt§7;M'yXAT 

;*#^H)9Fff-JWBl 0 3{c*3ttSM^«5c^2 0 3 OJigf 7c(^^g^lf»t 
15 i-i 1 3M+2 S-Cfet), mf±fta^^7— f§ft-#§|52 0 2 ©iff 7— f&ff 
ULidiK^JfethJIft© (9. 2k— 4. 6) M£IUfc^Ttt£j&>te/h£l/\, b/c^ 
oT. ^X^-fgffjfgRl 0 3©^^7^— flm^tei&SfctflttWU i^iS^TJ^ 
— f^fh^^(3©iS3S^X7 7— £FfH* fci&^&ff-||*£ »S^IWt?a>-5o S = 0 . 8 
MitetSi:, r <Dff-|l*f3:*5*5 J: ^ (9. 2k + 10) MM'bSit^ 
20 -C#5 0 fiSd^i 6 Olf y h (k=l 6 0) T?fc*Ui\ ^<D*% 

9—fflFffJH!ligJR35i:tHI*H:l 4 8 2Mi45 c *tREftlt£ LX7^x ; v^ f. 

£ UTtii^i-5i&^Jj:^^>&5fff-3S*tt*3*5«t^ri 6 0 0M"Cfc!) N rttti* 
25 "<Ti&i5 £ ft 5 fP3¥ittgiJ« $ tit V ^ 5 o 

i^iim^fc^*7^(x d) y d )r^L^t5^©-efc5 0 * 
X7^— fiedST/^vr?^ ys«Rft3«Lh©jSPSr^^7 7— ffiFtwaji 0 3^a^-t 
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=o< y s*n &n fc&^xmmmx-m sti***? -m&<ip= a d , y d , z d ) <d 

5 P=(X d + 1 ,Y d+1 ,Z d+1 )©jBl*©5*>X d + 1 Xa5Z d+1 , l«M*-?&$jft,fc 
^V^!/liR^±©^(d-l)P=(X d _ 1) Y d _ 1 ,z d _ 1 )©»H 

x d _ 1 ^.t>'z d _ 1 ^ti-^b. t~? j >mmx*£t £ titz.xts £ v ^ \?< ysn 

2 0 3im»ll©iiX d , Z d . X d+1N Zd + 1 , X d _ lN Z d _^ x 
dP=(x d ,y d )©j4g^x d ^U? y d ©«5cSrfT3&5o 7— «F?)-#gR 1 0 3(i7 

JfcJcHi 2fcJ:5 % y . x d , z d , x d + 1 , z d + 1> x d _ lN z d _ ld s 

15 4ibnti^x d , y d &ffi;fr^5J&^g5n^©^®tco^TifciKi-<5o 

* ^ -f*,£dP= (x d , y d , z d ) <omm 5 *>x d &u?z d % J«&jg£»-C3f $ twt^r ^ =r 

^ ya«n*«ji©^( d + 1 )p-a d + lf Y d + lf z d + 1 )ojffi«©5t»x d + 1 a 
^z d+1 , It«j6*-«$nfc^^rf^ yss*»RftjjjLh©jfe(d-i)p=cx d _ 1 , 

$ftfc^=M y«Rfta±O^P^T^^^mi-e*bfc(x,y)^A^L, 

(x,y)T% J«a£«£tt l ,Y l ,Z l )T*jft^jK^1\ A^^c^^-jOtSrdi: 
25 LttV^ ySffiRft^tcfeftS^^^-ffiF^dPOT^H' >M^§r(x d ,y d ) 

-e. tt&mM&(x d ,Y d ,z d )T~^ti^tim-to vMtfmmm±<Djn 

(x d + i,y d + i)T% «»Jfi*«rCx d + 1 ,Y d + 1 ,z d + 1 )-c^tt^ti*i-c 
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XTiyT'l 2 0 1 (d*5V>TX d _ 1 xZ d + 1 ^ft^$^ l/N ? T x $ 

tlZo XTvZf l 2 0 2(3LjoVM:Z d _ 1 xX d + 1 ^ff^$^ Wv^^Ta^ 
i^^So S/^l 2 0 3(^^TT 1 -T 2 ^f|f $tl6 c ::t'l/^7^ 

5 9, bfc^ 0 rX d _ 1 Z d + 1 -Z d _ 1 X d + 1 ^ff-^^-5o ^©^^v^^ 

&-*&$j£;ft,5o *T-y?l 2 0 5^:fe^TX d -T 2 /^f-t-^£5 o 
T 2 ^«Z d x;»^£ftT£>9. L/c^ 0 -cX d -xZ d ^H-#^n§ 0 -^(D^^ 
^^^T 2 M$M 0 ^^l 2 0 Q^^^XT 2 (D2mtm%^H^ 0 
10 r r t^^^ T 2 lcm d -xZd «$ilTi3 , L-/t^oT(X d - X Z d ) 2 ^ff 

TiXT^SfflfL^tT,^ ^^-ei^^^T 1 ^«X d _ 1 Z d + 1 -Z d _ 1 X d+1 ^ 
l/^^Ta^fiCXd-xZd) 2 ^^^^^^^^, bfc^ oT (X d - 
xZ d ) 2 (X d _ 1 Z d + 1 -Z d _ 1 X d+1 )^ff-^$f l § o ^O^^^^T!^ 

2 {^miSfhZ> 0 ^"ryzfl 2 0 O^jo^TTsXZd + j^Jt^ift^ 
:rt^7^T 2 ^f*4By^*g-|rt 9 % b7t^oT4ByZ d + x ^fMf & ft 

Z d - 1 l)m%.&)nZ>o r^tfW^^T 2 td^4ByZ d + 1 ftT*3 «5 % b 

20 fc*So-C4ByZ d _ 1 Z d+1 *Stt-3t*tL5. t©»^^^T 2 |:M$tl5o 

^^1211 KU^-CT 2 xz d #$f-#£ft3 0 ::x*^n 2 iai 

4ByZ d + 1 Z d _ 1 dS«HW*nTd3!3, bfciSo T4ByZ d + j Z d _ 1 Z d ^|+^^tb§ 0 
-t©3ft*^V"^^T 2 ^tt^tb5o 2 1 2&C£^TT 2 XX d #Sf+ 

H£ft3 0 ^^T?^^^T 2 H:tt4ByZ d ^ 1 Z d+1 Z d 3ftS«Hfi$nT33«?, bfc 
25 ^ 0 X4ByZ d + 1 Z d _ 1 Z d X d ^ff^^f L § o ^^Jg^S US?* * T 3 iCfem^tl 
So ^rj/^l 2 1 3m^TT 2 XZd^H"I^tlS 0 ::t*W^7^T 2 itf4 
4ByZ d + 1 Z d _ 1 Z d ^^$tLT*3«9, bfe^o "C4ByZ d + a Z d _ j Z d Z d ^tUT 
£ft5 0 ^©WV^^T 2 i«$ix5 0 *TyZf\ 2 1 4 121*5 l^T Ux? 
2 (Dm7tl>mW£nZ>o ---e^^^T 2 (-«4ByZ d + 1 Z d _ 1 Z d Z d ^ 
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:rt * * T 2 fcttl/4ByZ d + J Z d _ ! Z d Z d ^ ^ T 3 »Ctt4ByZ d + 2 

Z d -lZ d X d tf^MllfemZfLTte V x Lfc^oT(4ByZ d+1 Z d _ 1 Z d 
5 X d )/(4ByZ d + 1 Z d _ 1 Z d Z d ) ^ff^$^5 o -tOjfe*^ l/^^x d {Hftjjft^n 

So KT-v-fi 2 i 6Jc:*5v>-CT 1 xT 2 35stnr$ns. rrfi/^^Tji: 

(X d -xZ d ) 2 (X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )^l/i;^^T 2 |J:ai/4ByZ d+1 
Z d _ 1 Z d Z d iS^rtL-etL«H|ft$nT^3?), L/c^ oT (x d _ 1 z d + 1 -z d _ 1 
X d + 1 ) (X d -Z d x) 2 /4ByZ d _ 1 Z d + 1 Z d 2 ^ff+» £;ftS 0 ^©j&jfr&S U^*y d 

10 ^*oTU^^y d fctt:(X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )(Xd- 

Z d x) ^ByZd^Zj + ^d 2 ^*&^£;fx-rV^ 0 Ui? x ^fe^T yZ? 1 2 

1 5fc^r(4ByZ d + 1 Z d _ 1 Z d X d )/(4ByZ d + 1 Z d _ 1 Z d Z d )38S*|ft*jx. * 

J:»^«teJ:?>4-;te>*i,fcx. y , x d% Z d , x d + 1% z d + 1 . x d _^ 
15 Zd.j^b^^^V y SHR lilt joit 5 ^ * 7 ^©7 7 ^ yii ( x d , 
y d )KiS8*t5ffi^T«7n*tLSa*«:«T©ifi9-eS)S 0 ,&(d+l)Pte,£rdPt 

20 ft« 0 ^fx d =X d /Z (h x d + 1 =X d + 1 /Z d + 1 , Xd _ 1=Xd _ i/Zd _ i 

So 

* d =x d /z d T?fc5tfs x ^5c^(^(sii5:^Me>-re6<j-cy d o^-e^ii^-r§ 

25 ^ S ^W ...| 20 

bt£% 0 ^(Dx d , y d «®l J; LfcjJot77-f 

^j^H ( x d > y d ) ^"fit^ ^"C^tc $ ^xX v^§^ii:(ji7^^ )o 

±.mmm-±xT-y?i 201, 202, ^s^i 204, 
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37°1 2 0 7. ^ry^l 2 0 8. ^rj/7°l 2 0 9, ^yZTl 2 10. ^^5/ 
^1211, *"T-y?l 212, 77^/12 13, ^T^7°l 2 1 5^tK^x 
^7°1 2 1 6{^V^T^-|3S^*±©^^Dff»4^^ct-r^o X^y^l 

2 0 6icte\,^xmm±<D2mM<DnwmL&!&mt-tz> 0 t.t^ ^r-^'i 2 1 

Jt^Ti:fc3£lft/h£V^T«£LT^ £l\> ^|5gf*_b©^(Dft-^i^M s ^|3g^r 
±©2^»©fi-^*^S^LtJ«^f*±<D^7n^©f+»ft^ I i-fS^r, _hl2^ 
JiRtel 2M+S+ I (DwtnA&>&mtirZ) 0 -foteWM* X 7 ~mVrW-(Dn%m. 
10- tlt^TfeZfaiZshZ^^o mJLltxjj?—' fitd^S 1 6 Ot^ ht'fetiil 

{gfh^fDft-^ftte&^oJ;^ 1 5 0 OMii^ji,^ bti&o S = 0. 8M, 

ff#C>fh#ft t Jfc^T « 5 $ V \ b fc ^ o T5»ift t £JMI ^^tc TcF TV" 1 

15 ft, -LfB^JilISr <£: Tt>, JhtfiffltsUc: J; «9 fbixTfc x d , y d cDfft^ 

f+^-e#ttf^x d , y d (Dm&m5cT°% S 0 -^©m-a-^^v^^-IS^jie:^^ 

^:^!-<i;^ ^7^5/^1 2 0 8fc:4ott5^cDft^s^iiM-t-5r £#st# 

-So 

Z d , X d + ! , Z d + x , X d _ lt z d _ ! Srm^-t-SBlSJa^* 7— fflFfhSiClfKO^aatco^ 
T&Wi-3o 

^^^7 7— fgff#$|3 2 0 2TJ2, 0 3{dA^$ft7t^E^ 

25 *3V^lt^Jffi«T-^$n*:^^7— f&^dP=(X d ,Y d ,Z d )© 5 *>X d &l>*Z d , 

fiit^ § > =? ^ y mm P3 (d+D p=(x d+1 ,Y d+1 ,z d + 1 ) 

© 5 *>x d + ! &t>*z d + ! , Ifimmmr&R £ tift* s =f ^ y §a*f R ttiBLh© 

(d-l)P=a d - 1 ,Y d -i.Z d _ 1 )05*)X d - 1 XUEZ d _ 1 %ffl*t5. ^Ty-f 
50U LT, 3C»[ I tC^OJIlMit 1 SrftA-fS. ^fj//5 0 2^ LT, ^P©2 
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ySi4fP3ftJ8&©l*^IS^43*t5 2fflF3f©^^ffiv>T2ffiFjfe2PSrtm-r5 0 
^^^^5 0 3 i LT N ^^HfcfUHBl 0 3^A^$ttfcaRft^_hO^P 
£*^y:/5 0 2T?#«>fc J £2P*r, £©jft(P, 2P) £ bT^i~S 0 -^-«P& 
t*A2P14|*^ffi«-T?S£jixTV<>5 0 77y/5 0 4 ^ LT, ^iU t^ti^—' fit 

7^fr< 0 ^©t'-> F©ffi^ltfcM77j//5 1 0^< o ^7^507 
<b IT, *t#ffi«fcl.fc «m£*Lfcj&tf>a(mP, (ra+l)P)^i^^mP^^( m +l)P(DAD» 
mP+(m+l)P<Srfir&V\ ^(2m+l)P^fff-#-t-§ 0 W^7y/5 0 8^< o 
T% ai^(rt)Pit ^^^^ ^ttnftioEMtlcjoitSJpl^^^ 

15 (mP, (ra+l)P)^fe^mP©2^#2 (mP)^ff*V\ ^2inP^tP3f-rS„ ^^^^5/ 
7° 5 0 9 <o. 2 jSF3|2 (mP) ft. Mff R ftill© JH^ffi^ 

*5»tS2|8F3f©^Srffiv^tHf$tL-5o ^7^5 0 9iU, 77^50 
8-e^fc^2mPi:^^2/^5 0 7 (2m+ 1 ) P£,£©la(2mP, (2m+l)P) 

£ UT, £©*&(mP, (m+l)P)©ftfc>t)^|fti-5 0 ^cD^^^iy^s 0 4^M 

20 So -rt% ^2mP, ^(2m+l)P x /SnPXtMS (nH- 1 ) Pte^Tt^JM^^T 

(m+ 1 )P)^b,£mP£/&(in+ 1 )P©^P#mP+(m+ 1 )P£fr&V\ (2m+ 1 ) P%ff^i~ 
5o ^Ot77j//5 1 1— f?< 0 rrt\ ^mP+(m+l)P« s Ulflf 

P3AIR©l^^!^M«^^:i3^tSAp*^;Sr^v^Tff^J|[$i^So xTy7>5 lit tt s 

25 l+i^jaf*H:J:?)*$jx^©|a(mP, (m+l)P)^b^(ra+l)P<D2f^#2((ni+l)P) 
Srfr*V\ ^(2m+2)PSrtH|t-t-So ^©1^7^/5 1 2^fr<„ 2{£ 
3l2((m+l)P)«\ y^«Rft«l©ltjKjffi«»J:i3tt5 2ffiFlt©^S:SrffiVN 

TfT^£tt5 0 ^TyZ7°5 1 2 t Lt, ^fj//5 1 0t*it>fc^(2iD+l)Pi:^ 
7^/51 lTtfefe^ (2m+2) P £ £ © & ( (2m+l) P, (2m+2) P) t V X , /& © M 
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(mP, (ra+l)P)<D^^>!9 fcHfr*ft-f5o *Oft^fy^5 0 4^15. ^rt, 
(2m+l)P, ,&(2m+2)P, ^mPR0 ^ ^(ln+l)P«^Tl^J^M^^^:*5V^•C^$^^TV^S 0 
^Ty/514i: Lt, Mf«^-e^$tL/c^(D|a(mP, (m+DP)/^ ^(m-l)P 

5 Z^jitS, ; eOt7TS'/5 13^T< 0 7fy7*5 13iU, JttJg&g! 
T?**tLfcjfemP=(X m ,y m ,Z m ) «t 9X m X.m m &Z:in : etLX d Rm d £ Lt, *f 
JKffi«t?*$tLfe^(m+l)P= (X m+ 1 , Y m+ J , Z m+ x ) J: 19 X m+ ! S0Z m+ x 
nW d+1 Xl« d+1 i:lT, X d _ 1 Xt« d _ 1 i:*H:a^-t-«. Y m 

^L<#5o $ifcX : ryy p 5 1 4m*5V>T(m-l)PSr^JC)5Bg^. f 1 0, 

15 S©<k5S<fc9, (ra-l)P^^feTfe <fcV\ 

3 r t j; 5 3 M+ 2 S £ ^Mtt^Rflc±©mj|to£hlMt % S tt^TRg 

©4^S:<©fMj[*tt % 3M+2S-efc5„ 7^7- W.(D I#B©tfjy h (D^ri* 0 
20 fctlfif, ^fy^5 0 7 JC*3V^-C*Dj|L©tHf* N ^TS'^S 0 8 iCfe^T 

©th3*4#i&^£ 45. tm6M+ 4 S <DWr&.m&&mb ft5„ 7—fi£ 

© i#B©!fs/ hoifc&si -cfctLfi, ^^y^s i oindsv^inJfotmc*, ^ 
Ty?5 l i^jsv^2f&3|[©tf3itftds^t3fcSo 6M+ 4 s ©tl-Jf 

S^^T-fcSo vvf^o:|§^j;i:}^T& 6M+4 S<D&r&.-§kifi&m'?$>Z> 0 x 

25 TJ/7 P 504, 77^5 0 5, ^7^^5 0 6, 77^^5 0 7, 77i//5 
0 8, ^7j'7*5 0 9MH:^TS'/5 0 4, ^t^7°5 0 5, 775/75 0 6, 
^r<>75 1 0 N *T-y7 5 l 1 % ^7^75 l 2 <DH 9 3g LtDEIfcte, 
7— fitd ©If y h ft) — llelt 0 2X^<D2{^W-<Df^%mt 

^7^7°5 l 4t?©(m-l)P©^-3S^SI^»^r#Jt^AtL5 i, ^{*©It* 
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*tt (6M+4S) k+Mt45. wr-Cktt7*7-' tttdOfcTs/ h#T~&-5 0 
— jftttteW:, ffJf4Ste N s = o. 8M6££jaatt>e>;h,5<0-C, 
tt*3*5«t^r (9. 2k+l) Mt^5 0 iitf7*7-f d^i6 0k-^h (k 
= 16 0) X~3btlt£, -hf5#Jli<DT/^^y XA<Dff^*«jo^J:^ 1 4 7 3Mi 

iyaji, T. Ono, H.Cohen, Efficient elliptic curve exponentiation using 
mixed coordinates, Advances in Cryptology Proceedings of ASIACRYPT" 98, 
LNCS 1514 (1998) pp. 51-65 fclttU !7>f h7*MffiRftHfc*3^T, !7 

^ ^ K ^ ^ ^ ^ T ^ a If T ^ Jffi* ^ ^ ^ U ^ * ffl V ^ ^ * 7 — ft 

«X 7J 7 — tedflS 1 6 0 tf 2/ h ( k = 1 6 0 ) XfotblS^ r ©^^7 7 — 

15 iS55^^*7"HffHjLSP2 0 2{cjoV^TJ;f^^JlI<DT/^^yXA^mv^^< 

Tfc, ^^^HKdRt^t>=fp« vmffiF)&M±<D&Pfrib. X d , Z d ,X d + 1 , 

7# 7— 10 3 t43ttSM«t8t7C*fP 2 0 3 ©jffiaRK5E^S*tHlL* 
20 ttl 2M+S+ I -CifctK r^tt*3g^^9H»th#W2 0 2©J«iS^*7*-HS 1 
f+»^>^f+»»<Z) (9. 2k + l) Mtmjt-<Ttt5^/h$V^ Lfcj^o 
t\ *7J7— (Sfr^gBl 0 3©^^7—fflFfH|LH:i^5?'fe«-Jt*tt, ffiit^77 7- 

S = 0. 8MtMf§^ ^(DfrlSite&^oJ;^ (9. 2k + 53. 8) Mi 
25 Mt)5ri:^f#5 0 flil^^7-f d^l6 0t>b (k = 16 0) 

*Ui\ >H cd^Jj y fc&m ftfr Jlfttejojo <fc ^ 1 5 2 6M^i5o *f R ft 
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m4(DmM$ms 7* 7—m\w& 1 o zi^^y—mm*^^* y^tt 

^£17 * 7 — f£,£ (X d , Y d , Z d ) b tH^i"5o 7 * 7 — fltd^ 

5 ^^^v y^fRftl|Jh©,£P£7* 7-<fgH-||£B i o 3 ^A^i-§^^^ 

*7— f£ff-jfEg|$2 0 2^JetL^{«So ^7*7— fgrff-^SB 2 0 2li§ltll 

r v > xmrnmrnxm 7*7 — m&dP= a d , y d , z d ) <omm<o 5 

10 Y d+1) z d+1 )©gto5^x d+1 TO d + lx MJM^^nfc^^v V 

Sl«Rft»±©^( d _ 1 )P=a d _ 1 ,Y d _ 1 ,z d _ 1 )SrtH|[U 77^y» 
S^fcAA^f^y^ y^*fRftl§LhO,&P= (x,y) ^Kl^O'lf $R£MI 

0 3fc:-£;t5o J«®7t;gB2 0 3 tt#;t kftfcffifcOfflKd* Z dN 

x d + i> z d + i> x d _ 1% z d _ ls xst^yj: t)^^=f> y^t m&mizm^x&t 

15 iMMTric $ tbfc 7*7 — ffiF^tdP= (X d , Y d , Z d ) (Dmmx d ,Y d RtfZ d (D^jc 

*7-^(X d ,Y d ,Z d )Srfh#^^ UTtH^i-5 0 

Ml 3(CJ;«5, Jgg^x, y X dN Z dN X d+1% Z d + 1 , X d _ lN Z d _ l3 JS^. 

x.b^fc^ia d , y d , z d ^tH7Ji-5«m7c^oM3g{c:ov^TI^0Ji-^ o 

20 i^7c^2 0 3m *^=fp< yMffiRfta{^:*5v^Tl^j^M^-e^$tLfc7 

# 7 Hfc^dP= (X d , Y d , Z d ) (Dm.M<D ?ibX d RTfiZ d * ttl£M*lT*ig $ Hfc^ V 
=T* y^«Rft«Ji©^(d+l)P=tt d + 1 ,Y d + 1 ,Z d + 1 )OJffi*©5*,X d + 1< R 

t>*z d + ! , itJEMtt?* $ ^fc^e ^ =v y MWFi &m±<z>& (d-i) p=(x d _ 1 , 

Y d _ 1 ,Z d _ 1 )©fl|«<0 5^X d _ 1 Rt^Z d _ 1% 7*7— »tHT«IJl 0 3^A7J 
25 ^tbfc-^^V y iiRfti±©^P^77^ V^-e«Lfc(x, y)£A77 U ^ 
T©#at?it«ffi**5 v x. 6 *Lfc 7 * 7 (X d ,Y d ,Z d )^- 

(x,y)T% tt^ffiH^CXj.YLZ^-e^tL-e^-ro A7a$flfc7*7— fil^d<h 
bt^y^ y^f Rft^^*5^5 7*7-^dPOT^^ >-Mil£(x d ,y d ) 
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Cx d + i,y d + 1 )-C% WM#^(X d + 1 ,Y d + 1 ,z d + 1 )T^n^ti^-fo 
tl^o ^^^^1 3 0 2(e:^^TZ d _ 1 xX d + 1 ^ff-^^tt, I/S?7^T 2 K# 

•9x Lfc^oTX d _ 1 Z d+1 -Z dr _ 1 X d + 1 ^tf#^tL§ 0 ^©^S>i?7^ 

l^^HS, ^T^7°l 3 0 5m^TX d -T 2 ^H-f rrtl^yx^ 
T 2 JCf4Z d x^«rtA$ttT*35, b7t^ 0 -cx d -xZ d ^f+^^tb§ 0 *©Jfe*iS 
I^**T 2 *L5„ *T<y7l 3 0 6lZ&\,^XT 2 <D2mmmt5thZ> 0 

T i XT 2«^. --" e ^^^T 1 {d^X d _ 1 Z d + 1 -Z d _ 1 X d+1 ^ 
U^^T 2 ^«(X d -xZ d ) 2 ^^n^|ft^tLTfc^, Lt^oTttd- 
xZ d ) (X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )^ff^$tL§ 0 ^(DllgWz&UifXpY d iZ.fe 
im£flZ 0 XTyZfl 3 0 8^*5VNT4BXyiStm$tL5 a ^Ofe^V^^ 
T 2 (-^lfi$tL^ 0 3 0 9t*5V>-CT 2 XZ d+1 j8Sfm[$n5o- 

r ' u ^^T 2 1C W:4By^*&^ $ tLTfe <0 > Lfc^ o T4ByZ d + j ^f+Jf ^^§ o 
^©W^^T 2 M^5 0 7f-^l 3 1 OtC*5V^T 2 XZ d _ 1 
^«-JI$HSo --T?^^^T 2 K:tt4ByZ d + 1 ^Jft$ixT*5e) % Lfc^o 
T4ByZ d + 1 Z d _ 1 a5fH*£*i,5 0 * T 2 $ ^bS 0 ^ 

25 y/l 3 1 lfc&\,^XT 2 XZ d $mn£tlZ> 0 CiT^^^T 2 {m 

4ByZ d+1 Z d _!*Mfttt*iXt:Ja?j\ L/c^oT4ByZ d + 1 Z d _ 1 Z d ^tf^$tL§ 0 
*©«*#W?;**T 2 M^£jh,5 0 Xr^l 3 1 2^^^TT 2 XX d ^fff 
H£;H,<d 0 --•e^^*T 2 »Ctt4ByZ d + 1 Z d _ 1 Z d j»«rtft**LT*59, bfc 
* s oT4ByZ d + 1 Z d _ 1 Z d X d j)Sff3SC$nSo *©3te**Sl^^^X d tJl»j(ft$ix 
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4ByZ d + 1 Z d _ 1 Z d ^|!*i^tLT*5«9, Ufc^o T4ByZ d + a Z d _ x Z d Z d &Vc% 
$H3 0 •^CD^^z d ^||*I$tL5o Lfc^oTZ d (C«4ByZ d+1 Z d _ 1 Z d Z d 
^^$tLTV>S 0 U^^Ydfd^^T^^^l 3 0 7^*5V^T(X d -xZ d ) 2 

Jife^JlKclJ; «9-£;tfc*l/cx. y. X d , Z dN X d+1% Z d + 1 , X d _ lN 

z d - 1 ^ib^^^~^^(Dmmmma d ,Y d a d )^n^m^xm7t,^n^m 

Stt^TOii 9 -C-fe5 0 ^(d+l)P^^dP{C^P^D»L/c^-efcS 0 ,&(d-l)Pte 
10 ^dP^^P^^Lfc^T'fcSo mzi&^frm 7 r £ 

So ffi^m^|FB2 0 3«^^7 7— ffiFJ^©l**JffiaiT?«$nfc^*jaE«i LT 
(X d ,Y d ,Z d )%£i}^-r§ 0 
JrlE^JlRiCj^^JtbfrLfcLx, y X d . Z dN X d + 1 , Z d + lx X d _ 1% Z d _!^ 

h * * 7 —fc&<D*t&iam (x d , y d , z d ) }d*3 »* 5 lea^-c^TG ^tisi^ t 

15 ©ffl 9 T'feS 0 ,&(d + 1 )P«^dP(C^P^p^ Lfc^T'feSo (d-l)P^^dP^ 

#S„ Lfc^oT,|9^A rr-Cx d =X d /Z d , x d + 1 =X d + 1 /Z d + 1 , 
x d - i =X d _ i /Z d _ j 9 , £ © ttSr-ftA-t-a r. £ J: 19 ©ffl^ £ 

20 ^mi-Sir, $C7£#5o 

y rf = (x rf _,z rf+1 '-z d _ x x M xx d -z d x? -12 1 

25 45yZ rf+1 Z rf _ 1 Z rf JSr rf -ffc 2 2 
AByZ^Z d _,Z d Z d -12 3 

fcJ:5X*r*-*Ltf.fcl\, rr-e^LfcXd, Y d , Z d , }i|13TvTUc»J; 
0-£;t£>:h,T^5 o LfciSot, i^»ffi*©fi[(X d^ Y d ,Z d )3^S^T«7C$i^TV^ 
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-Lfe^JlHte^T^^l 3 0 1 , 775'7'1 3 0 2, ^7S'7 B 1 3 0 4, y 
X1 3 0 7, 77^/1 3 0 8, 77j/7°1 3 0 9, ^7>7 7°1 3 1 0, 77$/ 
Xl 3 1 1. 77^7°1 3 1 2M77^^1 3 1 3K3S\,^T^fmfa±<DmW(D 
wtW--tL&!&mt-f-% 0 y^Tyfl 3 0 6iC:fe^T^Pgf2ta:<D2fj|#©fT^: 

M. ^m$F±.(D 2 fHME<DlrJfL»£r SifSt, _kfE«!te 1 0 M+ S Of+IS*^ 
10 ^1 5 0 0MH£iMJf&£>;ft,5 o S = 0. 8M^^i-<5<bM^l7E(DiT»*{i 

77^13 0 8iz&tfzmn<D&nm&mmrpzz.k&-vzz o 
mc. **7~imRu*:is=rst yifHii±©»fc, x d , z d , x d + 1 , 
20 z d + 1 , x d _ lf Zj.j zttijj-r&T/v^v Xi^}3:ov^rt^&0Ji--5 o 
^4^^©i«^^7-^tf^R2 o 2(DSig^^7^— mm^mt 



25 jS^*7- f*ff^§P2 0 2^*5V>T±fB^Hi(DT/P^y XA^^/^< 7 

T^^Hiid^^^^v ysHRfttoW?,, x d , z d , x d + 1 , z d + 1 , 

XA£JBVv0^cJ;V\, 

9— »ffr3l§P 1 0 3 fcteif zmtWMTi^ 2 0 3 ©ffiil^T^iKM&frJf* 



^^^ysiRftto^^^ x d , z d , x 




WO 02/39664 




PCT/JP01/09781 



tei&KfcW-JH:© (9. 2 k+ 1) Mi:{e:Jt^TttS^^/h$v\ Lfc^oT, 

I^©fi^^7- ffiFtWtHi6&R*W-J|L*tJSffPI«SE-eS>5o S = 0 . 8Mijg 
5 StSi:, w<Dfh^ft«i3*5j;^r (9. 2 k •+ 1 1 . 8) M£ JLSTfcS r fcflS-C 
M«^*7-fd^l 6 0lfs' h (k = 16 0) T-£>*Lte\ ^(^^7J7 
— ffiFtHHJlie&S)fcfhJ|[*Wtfej3j:-tl 4 8 4M£&£ 0 URtti^ LT17-frn^ 

10 UTffl*-r54&^tJ:^^^Sffl|i*tt*3*5<t-€:l 6 0 OMt&t), r. 

*7- fflFfHMlS2 0 2^^:tbSr^tt5lSo 7— fflFtHWR 2 0 2tt^ft& 

ofc;*7J^iId£#x.b*lfc^^=0< ystiRfci±©^b^>-37 yift 

R tt^fdjoV^TT 7 -Y Z/mm-?& £ fL/c^ 7J 7— |£,£dP= (x d , y d ) <£J&|g© 5 

20 y d + 1 )OliCHx d + 1 , ^JffiatT?**^^^^^ ^Iffi R *H_b 

©A(d-l)P=(x d ._ 1 ,y d _ 1 )©Jffiai0 5'fex d _ 1 SrtH|[L % 77^ >-Jffi«"C* 
^ttfcATJ^nfc^e^^V yMtfR«_h<D^P=(x, y) £*te*©flHS&Jffi»« 
tc£|$2 0 3(£-^;i5 0 JM^5nS52 0 3 Jh,fcffi*©ftx d% x d + lN 

25 7— f&^dP=(x d ,y d )<OJS«y d ©«7cSrff^5o ^^7-fffI^l 0 3li7 
7 ^ ^Jffi* \Z.& V ^ -C^lCJffi^ &5-x.hZltz.**^ (x d ,y d )^ tWJfe* 

Hk\zM2 6fc«fc Mx, y s x d , x d + lN Xd.jm&Mt^, x d% 



10 
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fcXZl? — ffiF^dP= (x d , y d ) 5 ^>x d , 77^ £ ttfc^E >• rf 

* yiHBfito^(d+l)P=( Xd+ll y d + 1 )ofi©Hx d + 1> TZ? 4 1/ 

mmx*mztiK.*>=r* v mmm &m±<D& (d-i>p= ( x d _ x , y d _ 2 > ©it© 

<£&Mt!^;i ^ # ^ (x d , y d ) ^ ttl^i-5o 

^^2 6 0 liC^Tx d -x3Sff-|S£;ft, N ^ 
T^26.02tmT 1 O2 J^f fcfc *> (x d -x) 2 ^fff# £*U U Z?X * 
TiKH&tt^nS. ^y^2 6 0 SfC^Txd.i-Xd + ^fflS^ 
^^T 2 (e:*s^^tLSo ^ts/7°2 6 o 4}c:*5V^tt 1 xt 2 d s ff3J$ns 0 - 

rT^^^T 1 {C«(x d -x) 2 ^ix^^T 2 ^ttx d _ 1 -x d + 1 ^^tL^^ 
JW**LT*5 5. ^^oT(x d -x) 2 (x d _ 1 -x d+1 )^ff^$tb§ 0 *©J»* 
&UZ/*#T TLiZfeffiZtiZ. ^t^7°2 6 0 5^*5VNT4BXy^tf^^^t N ^ 

15 ^^T 2 t31«Wfi$tLSo ^Ty^2 6 0 6 fc::*3V>TT 2 ©i£^W3££;h,5 0 
rrtU^^T 2 |: f*4By tfM&*ft $ *LT*5 19 , L 7t 35S o T l/4By;£iSffJfE £ 5 0 
•5:©^m^i^^^T 2 Jj:t&j(rt$tLSo ^-7^:7° 2 6 0 7 1^^?! XT 2 ^ 
W-*£*L<5 0 ^^T^^^T 1 ^«(x d -x) 2 (x d _ 1 -x d + 1 )^l/^^T 2 
tCttl/4By*S^tb-PH*Mft$tLT*5 5 % Lfc^oT (x d -x) 2 (x d _ x - 

20 x d + 1 )/4ByflSfm<**l£o ^© ( W^^7^ d M$ix5 o Lfc^oTV 
^^y d ^«(x d -x) 2 (x d _ 1 -x d+1 )/4By^mi*l$nTVNS 0 l^**x d « 

iilB^mtd «t «9 ^*7- ^^>yjffi^y d ^7c$n-5SSf^TOii V X&Z> 0 
m, &( d + 1 ) Ptt^dPfc^PSriDH Lfc,£-e& «9 x (d-l)P^^dP^ £>j£P£«J|[ 

Wi2£#*fcfe£1-5;:£K: < fctK ffc8£#£ 0 LfcjSoT, *9i:*5 0 

x d , y d {iH)2 6<D%mfc£ <0-5-X.ibh& o Lfc^ot, jy^yl 
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_Lf5#JlI«^^^^ D 2 6 0 4, ^X5/7°2 6 0 5RT$XTy72 6 0 7 \Z$S\,^ 
T^Rfr±©3HJ|Of|-3f*Sri^Si:i-S„ STt, *x y:7"2 6 0 2 fc^T^riS 
frJi©2.a&H©tHtft*igJilti-So ^l^7S'^2 6 0 6 fC^T^PS^JL 

5 cdw-^s, 2m»©ft-»*, M7zm&<D&n*k tomtoms \,^<DT?m&v 

^_b©3fi*7c^3f ©fj-3f 4S: I £-f-5 £ , -hfH^jUfte 3M+ S + I ©fHH&i&S 

^^HfiddSl 6 0 ify i*EJt^^9— »W3|E©tH|[4W:33d3«t-t 1 

10 5 0 0M^£JMg& <btb5 0 S = 0. 8Mj5:t> s I =4 OM^^E^-r^^jMS'^Tn 

15 R 7 ^ ^ t'fc 5 B©ft^^ $ < i 5 r i J; ?) , 775/^2 6 0 51:^ 

S3£7 # 7 — ffiFW-JHFS 2 0 2 T?r±, 7*7 —{gf+Jf g|3 10 3 id A^J $ ftfc^E- >- 

ioV^TT7^ ^M^-C«$tL/c7*7— ^£dP=(x d ,y d )©5*>x d> 77^V 
Jffi«t?«*tL*:*^=r^ y M*f P3 ftitSUbO/S (d+1) P=(x d + 1 ,y d + 1 )OH 

x d + 1 , T^w^ffiw-cai^n*:*^^ yiHRfti±©^(d-i)p= 

(x d _ 1 ,y d _ 1 )05*?x d _ 1 Srm^7i-5 0 X77/6OULT, I fc^ 

25 «HKlSrftAi-S. 775/7*6 02^1^ ,&P<D 2*g,ft 2 P^f+»i~-5 0 r^i? 

^p^iji^iik^t (x, y , i) <t lt* u mmmm^mmm 

K::i8tt5 2{^<D^tr^V^T2^2PSrf+^i-5o 7 75 '7 0 6 0 3 £: LT. 7 
* 9 -f&W-^lfP 10 3 iCXtl £ ftfcfllR ft*SLh<Z>,£P ^7^7*6 0 2 XJfrfrtc 
j&2P& y &<D$B.(P,2P) £ LT^-TSo ^-•c-^P^U ? ^2P«tti^M^-e-^$tL 
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6 0 5^fT< o 77^6 0 5 itT, ^§fcI£lig;(JD£*5„ 77^606 
5 * © fcf> h ©fj^S 0 T-fctlfcf* 7y/6 0 7^fr<, -^69 tf y h ©fjjT^ 1 -^fc^ 

if^75'/6io-fT< 0 ^7^6 0 7at, ««^«lc:J:»3**tLyt^© 
ffi (mP, (m+1) P) t> h ,&mP £ (m+1) P<Z?7JD^mP+(m+l) P£fr& V \ (2ra+l) P£ ffjf 
i-3o ^©ft7ry^6 0 8^T< o #nJfmP+(m+l)Pte N ^y^yi 

10 tt&mmiz. xvmz tnt&<Dm ( m p, ( m +D p> & & m p<D 2 mm 2 (mP) 

i J ^P3ft^^JM^^^{t5 2f^<D^^v^-ri T m$n5 0 ^ 

^(2m+l)P^(7j|a-(2raP, (2m+ 1 )P) t LT, <nH- 1 ) P) ©ftfo 3 

15 *fr*-*o ^7^6 0 4-I§ o ^f, ^2mP, ,S(2m + l)P, 

^ ? ^(m+l)Pfi^TltM^{CjoV^TS^i^TV^5 0 ^^5/^6 10i Lt, ft 
(c: «t «9 ^ $ H fc ^ ©*& (mP, (m+ 1 ) P) /&aP t (m+ 1 ) P^D»mP+ (m+ 
l)PSrf!r*v\ ^(2m+l)PSrff#^-§ 0 ^©#^^^^6 1 l^ff< 0 -rt% 

20 nmznz 0 ^/ena-r, * »>**;h,fc£ (m+ 

l)P)^e>^(m+l)P<D2^2((m + l)P)^fr^V\ jfeG^PfcffJH-s. 
S^^6 12^f< ( CiT? N 2^2((m+l)P)^ ^rfp* y gift! R Aft 

7fy/61 0^fe7c^(2m+l)Pi^^ :y ^6 1 lT^Jt)7c^(2m+2)P^^© 
25 a((2m+l)P, (2m+2)P) t Lt, ,£©ffi(mP, (m+l)P) ©ftfo (9 fcJMfrT <5 Q ^©^;* 
7^6 0 4-15, ,£(2m+l)P, £(2m+2)P % MmPRUM (m+l)Pte£T 

»*ffi*fcfcV^**nTVN 5 „ ^7^6 14RT, W«ffi«-e**^^ 
©IftOnP, (m+l)P);fr^ ^(nr^POJWi^JffiWJllfcJtSXffiaXa-iXOTteW 
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^ry7"6l5t LT N JtJBte*T*$ftfc/&BP= (X m , Y m> Z m ) «t «9 X m &t>*Z m 
tr^:ix-ettX d S.m d t U «JI«Htt?35 $ (m+1) P= (X m+ j, Y m+ x , 
Zm+i) «t9X m+1 RrJ«Z m + 1 Sr*n.^X d + iXt5Z d + 1 ir-r^, 0 lit, Y m 

5 ^T-mmm&tk&zwx'gf^wx^ ttoti^^ 0 x d _!, z d _ l5 

x d , z d , x d+1 , Z d + 1 cfc*K 
x d-i = ^- d-\Z < iZ d+l /Z d _ x Z lJ Z d+i 2 4 

x d =Z d _ 1 X d Z M /Z d _ l Z d Z d+1 -m. 2 5 
*m = Z d _ x Z d X d jZ d _ x Z d Z M - $±2 6 
10 £LTx d _ lt x d , x d + 1 ^3££>£ 0 ^©«7ry/6 13^<, XTy? 
613t LT, x d _ 2 , x d , x d + 1 ?rffi^i-S 0 _h|2^Jill(C £ *) % m^ji7 

45, 1 4^i3V>T(m-l)PSr*ae)5^C il3, ft 1 4 

fc£ tJjfcfc-Cfc mri^ifc-CfctU^ ((rl)/2)POl^rj//6 12© 

(ra-i)P^&-CbJ;v\ 

r £ fC J: 9 3M+ 2 S £ & 5„ r r-eMtt^"R5#:Ji©^Jf ©fUSfi, S te^RBfls: 
20 <&5£cD?f-^:i:«:, 3M+ 2 S TffeSo 7— lit© I #g © If y fOff^ 0 

^fy^6 0 7ti:*3v^JnJ|[<othJ|[# % j*?^:^ 0 8ic*3^T 2f&||© 

ffHf4#!&^«i:>fe5„ t^fct) 6M+ 4 S ©H-»iMSi ^#5— it© 

1 # s © f s/ h <om* 1 -e&fttf, ^r^6io m*sv ^-cw©tT»*. ^ x 

^6 1 K-*5V^T2^#©ff^*^g|t^5 o tftfct»6M+4 S 
25 #&RT?S>5 0 VN-ftL©»^^*5VN-C^ 6M+4 S ©tUtft^S-CfeSo 

^^604, 0 ^75-/6 0 6, 7f^/6 0 7, 77^/6 0 

8, ^7^6 0 9MI4^7S'/6 0 4, ^7y/6 0 5, ^7«>7'6 0 6, 
^^3/^6 1 0. 1 1> ^T'y^B 1 2(D^ 1 0M\^<D^\m±. 0# 

7— m<D¥ y hS) — 1 IHi: *5©t\ 7 7 y / 6 0 2 t© 2 ^ff ©Ihf f S 
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1 4 X<D (m-1) P©f+#fc^^f+#4^t^T 7 ^ ^Mtl^cD^m© 
fHfiSr^JtlJiAftS ^©WlWttt (6M+4S) k+HM+U^§ 0 
rrt'k^y- fitd^tf y hST*&5 0 -jK^teitt, trJIfiSte, S = 0. 
8M ^^ tf#* I fi I = 4 OMHj£ btbS©T% ^©ffHTittjSfe 

5 «fc-£ (9. 2 k + 5 1) Mt^5 0 -m%:t£x%7~ ftd^i 6 0 try h (k=l 
6 0) T?«>tLftf % -hl2^Jll(DT^^yXA©ff^*«j3*5j;^i 5 2 3M^^ 0 
^^7— fltd©lfy hhfr<Q<DnWmk LTtt*J:-e9. 2Mt45 e A.Miyaji, 
T. Ono, H.Cohen, Efficient elliptic curve exponentiation using mixed 
coordinates, Advances in Cryptology Proceedings of ASIACRYPT' 98, LNCS 
10 1514 (1998) pp.51-65 ia^ ^A-v^ b ^ ^MffiR fti»K:*5^t\ *7 ^ > 

T7^^M«-.©^m©ff»^S^*-S„ 6 o tf^ 

15 h (k=16 0) Xfotll^ ^(D^^l^-m%\r^^m(D^cMmt^^l 6 4 

Tfc. *#7H«MBWei'=r* ysf«Rft«Lh©^pj6^, x d , x d + lN 

«3M+S+ I -Cfct) % CtLtt^*7- »fr3MFB2 0 2CO^ii^7J7-{^ff 

#to&K&W-Jt*© (9. 2k + 5i) Mttcjt;^rrasdMc:/h*v> 0 bfc#o 

&&&&<oto&**7-mft&iz&&teft»xkmmmx~ibz 0 s = o. sm 

It> ( I=4 0Mifmt, ZfDtfM&tttS&J:^ (9. 2k+94. 8)M 
tlf^§rt^5 0 ^l|x.^7J7— fltdj&S 1 6 0 h (k=16 0) X 
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"T?*>5o -f-J&fc)*). ^*7- fflFtHlflfUl 0 3©Affi^c;BV^;|f Rft>iita!7-f 3i 
/ui/^ h7-xS!ffiR*j»TfS>So fcfcU *#7—fflFW-JWBl 0 3 ©f*jg|5©H-g: 

7 — «FjS (x d , y d ) & tH? L tB^J tifc©t?fc5 8 7 7J 7 — ffidS. 17 4 =c;\s is =l 

h^^M^Rft^_b©^psr^^7 7— mifrymi 0 3fc:A;&-$-5£Hij£;*;&7 — 

h ^S«R*j»lC*5V ^tlt^Mtlt*^ $ *Xfc7 7J =7 -f^^dP= (X d , Y d , Z d ) © 

^(d + i)P=tt d + i.Yd + i.Zd + i)©«*©5*)X d + iXt;z d + 1% M&JMM 

x-mztitiv^^/vi/zr. h =7 r *isui©/s (d- d p= (x d _ x , y d _ x , 

20 Z d _ 1 )©^I©5^X d _ 1 ^0?Z d _ 1 ^f+#U N T7^>-JM^T^^H/cA7tl 

^P2 o 3K^-^^o Mmwjv^2 o 3^K.(bntcmm<Dimm d , z d . x d+lN 

Z d + 1 , X d _ 1% Z d _!, xXtfy J: t) V-<(*-}VZ/=l Y=7^Wm^m^\^X 
77^>Iiti$^fc7*7-f^dP=(x dl y d )«x d^t^y d ©^7c^ 
25 fr*5. ^7J^— f£ffj|g[51 O 3ttT^^^jMtI^*5VMT^^C^^^^^^ 
fc^7J7-^(x d ,y d )Srff^mt UTtti7^i--5o 

»CK:Bll 4Kl«fc»K &*gx, y. X d> Z d , X d + 1 , Z d + lN X d _ lN Z d _!*S 
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s ttfc ^ t> 7 -f^^dp= (x d , y d , z d ) (omm ?t>x d Rm d , mmmmxm £ h 

tJ^5^>x d + 1 &t>'z d + 1 , ttf^Mi-e^^tLfcy-Yoi/i.^^ h^SMfREfen 
±o^(d-i)P=(x d _ 1) y d _ 1 ,z d _ 1 )oi i ©^x d _ 1 Mz d _ 1 , 

^^-e* bfc cx, y) ^a^j u sxr^imxr^^ >mm^^x^±^mm^ 

h T7 M+h R ft Mk-h CO &PCD T 37 ^ (x, y) T% (X a , Y x . Z x ) 

10 ^*t^^^7-^dPOT7^>-M^^(x d ,y d )T% «JM*&(X d ,Y d ,Z d ) 

h77a«Rfti±0*(d + l)P077^ISfS(x d+1 , yd + 1 )^ it 
(X d + 1 ,Yd + 1 ,Z d+1 ) XZtl^frm-fo 
15 ^s^l 4 0 HC^XX d _ 1 xZ d+1 ffiWrM^^ ^^^TjIcM^ 
^T^7l 4 0 2fcj8V^TZ d _ 1 xX d + 1 *fH|[$ii. V^^T 2 »C# 

T i^«Xd- 1 Zd + 1 ^i^^^ T2 ^ ttZd _ iXd + i ^^^ n ^ $nr;fe 

•9, L7t^ 0 - C x d _ 1 Z d + I -Z d _ 1 X d + 1 ^tf^ $ ^ 5o ^©jf^S^*?^ 
20 Ti^^^tLSo ^T5/7"1 4 0 4i^VNTZ d X x «$K l»i?X*T 2 
fcttl&SftS. 7T^1 4 0 5f^TX d -T 2 «^ o 
T 2 fcttZ d xas«**JiT*S5, bfe^ 0 - r x d -xZ d ^tf-^ $n ^ )e 
^**T 2 fc:»*ft£*l,3 0 ^^-/^l 4 0 6tC*5V^T 2 02*^tH|[$tl5. 
^^^^^^T 2 ^ttX d -xZ d »^$nT*5^, LTh^oTCXd-xZd) 2 ^ 

T!XT 2 ^I^ 0 --^^^T 1 ^X d _ 1 Z d + 1 -Z d _ 1 X d+1 ^ 
l-^^T 2 ^«(X d -xZd) 2 ^^tL^n^$nT*5^. LfctfoT 

(x d - x z d ) 2 (x d _ ! z d + i-z d _ !X d + 1 ) astursfts. ? 
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r. n -e w v 5 ^ * t 2 r*4y j&s*Mfi s nr *s 9 , ufc a* o T4yz d + j mm £tiz> 0 

%:0tt3k&}s*S*9T 2 l-M§*l5o ^7^/14 1 0 fcSSl^TT 2 XZ d _ 2 

5 4yZ d+1 Z d _ 1 ^f+|fL£tL5 0 ^©^l/^^T 2 }^i^n§o ^TV? 
141 Hlli3V>TT 2 XZ d aSW-ML*iX«, r^T»V^^T 2 .IC(j:4yZ d+1 
Zd.^tfr^^tbT^^, U^oT4yZ d + 1 Z d . 1 Z d *stf3T$nSo ^tOj!** 
36Sl^^^T 2 U:»jW*nSo *>Tyf\ 4 1 2^*5V>TT 2 XX d dSfHi[$nS„ 
:if^7^T 2 »C«4yZ d + ! Z d _ ^ #«Bffc£*LT:i8 D . Lt^oT 

10 4yZ d+1 Z d _ 1 Z d X d *Sfm$tL«o * T 3 IC»|fi^ttSo * 

7^141 3iJl53V^TT 2 .XZ d ^H-^$^§ o i;t"^^T 2 (Ctt 

4yZ d _ 1 Z d + 1 Z d ^#fi$tbT*5t), Ufc#oT4yZ d + 1 Z d _ 1 Z d Z d astH*£ 

^T 2 ©3S?7C^fl-^[$^5 0 r^-t s V^^T 2 tC«4yZ d + 1 .Z d _ 1 Z d Z d ^^^ 
15 £ft,X3S<0. L7t/^oTl/4yZ d+1 Z d _ 1 Z d Z d ^ffJP£n5 0 ^:©J»*36SU^ 
^^T 2 t*MA$n5e ^7-7^14 1 5m^T 2 XT 3 ^|fg^ii5 0 - 
rT*l/^^T 2 fcm/4yZ d + 1 Z d _ 1 Z d Z d ^^^^T 3 ^«4yZ d _ 1 Z d + 1 
Z d X d &tt^tl&ftl£1nX3S Y) N Lfc^oT(4yZ d + 1 Z d _ 1 Z d X d )/ 
(4yZ d + 1 Z. d _ 1 Z d Z d )*SH-3t-^n5o -=e^m^x d ^^^^§ 0 7T-7 7°1 
20 4 1 6 111331 vCT! XT 2 astW$ft3 0 ^ T x idft(X d -xZ d ) 2 

(X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )^i/^^T 2 ^«l/4yZ d+1 Z d _ 1 Z d Z d ^^tL 
■etL»ttStbT*5«9s Lfc^ot(X d - 1 Z d+1 -Z d _ 1 X d + 1 ) (X d -Z d x) 2 /4y 
Zd + iZd^Zd 2 m\n&thZ> 0 ^<DmM&\sVx#y d fcfemt$ftZ> 0 
on-v ? ^^y d ^fi(X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )(X d -Z d x) 2 /4yZ d _ 1 Zd + 1 
25 Z d 2 #MM£;ix-Cl^ 0 ^^^Xd^ri^^s/^l 4 1 5tJl*3V>T(4yZ d _ 1 

Z d + 1 Z d X d )/(4yZ d _ 1 Z d+1 Z d Z d )*S*&jW^^ ^©^M^a5fTfc;b;h,;fe^£> 

x> y, X d% Z d , X d +i % Z d + 1> X d _i, 
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(x d , y d )fo&tfzw.&±xm7t£hzmtoi-z&LT<Dmy-eib%>o ^c(d+i)p« 

AdP^^PSr*p»L*:^T-fcS 0 ^(d-l)Ptt^dPd^^PS:^* L^T'fcSc !7 

5 (x + x„ + x d+1 - x) 2 = (y d -y) 2 --$±27 
(x + x d + x d _ l )(x d -x) 2 = (y d + yf - & 2 8 

- - x) 2 = 4y d y -|2 9 

10 y d =(x d - l -x d+ ,)(x d -x) 2 /4y -13 0 

rrt-xd=x d /z d , x d + 1 =X d + 1 /Z d + 1 , x d = 1 =X d = 1 /Z d = 1 

•So 

j>„ = (A^Z^ -Z^A^XA, ~Z d xfl4yZ d _ x 2^Z 2 d - » 3 1 
* 4vZ Z Z Z 

k?£% 0 rCl?, x d , y d fi|^l 4T^L7t^S^J; 9 £ -P> ft 5 „ Lfc^o 
T . r 7 ^ (x d , y d ) 69f[f ±x iStlX\,^Z^klZfj:Z) 0 
20 -hte^llR^^^^^l 4 0 1 N 7f^l 40 2, 77^1 404, y^T y 
^1 40 7, ^fy/14 0 9, XTy^l 4 10, ^y^l 411, ^^5/ 
:7°1 4 1 2, XTyZfl 4 13. xTy-fl 4 1 5W^f^7°l 4 1 6 Kl:feV> 

!&mt-rZ> 0 ^y^l 4 1 4}^j3V>T#PS#:±C»^7c^Otl-^»^ 

*&tfis*7c&#©tH« <^ J^-obi^/h $ ^(oxmu Lxh^\ mvm±<D 
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3l*£r I b~f~5 t N _hie^Jilitt 1 1 M+ S + I offlilr^SttSo ntLttSS 
o tfs/ M?&;ftdc\ {^i+^(^f+^*«*5*5J;^- 15 0 OMiltm^ 

5 ■bbilZ)* S = 0. 8M, I =4 0M£<E^5£jffi«tt5c©Sf«tt5 1 . 8 

^t«lrf ^^/T$ilt 0 
ft, JbSB3MRSr£ "C<S>, ±JBffH*5£fc: J; n hfotz. x d , y d ©ffi^ 

io &mtt£z>vrK-mim*.-tz>o 

ffii* ^ # ^ — immM 2 0 * # 7 — ffiFfhSHFB 10 3 KAJj £ ftfc 17 ^ 

r ^xmmmm-cm $ titc** ? —m&dp= (x d ,Y d ,z d )<D5 

= (X d+1 ,Y d + 1 ,Z d + 1 )©5-feX d+1 XtJfZ d + 1 , tti£ffitJI -C* ^ tbfc 17 zc 
;W>3. h 7 ^M*f R &m±<D& (d-l)P=(X d _ 1 ,Y d _ 1 ,Z d _ 1 )©HX d _ 1 
20 S.t> , Z d _ 1 Srm^Ji-5 0 ^f^7 1 6 £ tt, -S-^bnfcy-f oc,i^>^ 

m-T&o ^©^Srfcbfea^T^P^i-So ^y^7 0ULt, ^Icil^ 

PttM6ffi*te::j8Vvc<x, y, l) t L-«U ^=0< y §y*f Rftl^MMIlc 
25 *5*t5 2f&|)[O^SrffiV^-r 2^2PSr^i-5o ^^^7 0 3i: LT N ^77 

2P^r, £©m(P,2P) t LTftW-f-So r r-e^p^t) ? ^2P«iti$jM^-e*^n-c 

W5„ 7T7/7 0 4i:Lt, -(ttdOhry hJttdS— ©rf S*» 
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0 5-4t< o XT-srZfl 0 5 b LT, Itl^li^nm„ XT*yZ?7 0 6 b 
UT, ^ ^7 7 -f © I # @ © t> h ©f ^ 0 T & 6 ^ 1 t'fe 5 5 0 ^ 

(D\f-y h(D\m^0X^fl\t^V-yyi 0 7^< 0 ^(D\fy hCDjg.^ 1 ffofrtef 
^Tj/7°7 10-fi ; <„ 7r^7 0 7HT, lt^M#^J;«9*^nfc^(D|a 
5 (mP, (m+l)P)^^^mP^^(m+l)P©^D#mP+(m+l)P^=fT^^^, (2 ra +l) P^ff^-f- 
-5o ^KD^k^ yzTl 0 8— =fr< 0 2JD|fjnP+(ra+l)Pte N ^^=jVy^tf 

P3*HoMB^ic*3fta*D^^Srffiv^rtf-#$n6o 77*^7 o 8 ^ lt, 

M§Z)MM KXVm^fofcjS <DU (mP, (m+1) P) ,&mP© 2 2 (mP) £ fx V > % 
M2mP&fYW-t& 0 W^7S'7°7 0 9^fir<„ 2{g»2(mP)Ji, 

(2m+ 1 ) P&j£(Dm (2mP, (2m+ l)P)iLT, (mP, (ra+ 1 ) P) (DiXfr V Izj&m 

-TSo W77S'7 , 7 0 4^I5 o ,&2mP, ,&(2m+l)P s AmP^X? 

A(m+i)Pi^xHmm.m^i5^^xm^tbxi^ 0 77^7*7 1 0 1 lt, 

15 jffiff f£ «fc V) ^ £ tbfc^Oia (mP, (m+ 1 ) P) frh ,&mP b & (m+ 1 ) P©iD#mP+ (m+ 1 ) P 

mp+(m+i)pf^ *>=o« ^mmnmmfDmmmm^^-f^m^^m^xt^m- 

£thZ> 0 *TV?7 1 1 b Lt> #J^^(Zl<t ^*$^fc^©M(mP, (m+l)P)^ 
^(m+l)P©2jg||2((m+l)P)^T&V\ (2m+2) P^ff^-T^ ^(D^^S/ 
20 ^712^t< 0 ^r-C, 2f^2((m+l)P)« s ^E>-^V y^tfRft^Ott^M 
^{-*5ttS2^(D^^V>Tfh^$n5o ^7y7°712iLT, *T*Zf 
7 1 0t*fcfc,*i(2m+l)P^7j/7°7 1 1 Tr ^ tc & (2m+2)P & (D M 
((2ra+l)P, (2m+2)P) £ L"C N ^©$fl(mP, (m+1) P) <Dftt> 9 £Mt5 0 ^©^^7^ 
^^7 0 4^I5 o ,&(2m+l)P N ,&(2m+2)P. AmPRXf,^ (m+1) PftitM 

25 f^^fcfeVNT^ft-CV^,, ^7^7°7 1 4 b IT, t^miT«£;ft7t,£<D 
(mP, (m+l)P) 7J^d, ^(m-DP^Itf^tl^^o^^XM^Xjn.^t/ZM^ 
Zm-x^r^fe^,, -^^^7^5/^7 1 5^tr<o ^7<;/7 15i:U, 
^ y^tRftS^*5(t5^(ni-l)P^. h^^MtfRft^Ji-ett^JM 
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flfc&(Dm.(mP, (m+l)P) fcft LT> ,&mP&?>*,£ (m+l)P&r 17 ^l^^x h 7 ^S*t 
Rftj»±T?l+*ffi*"T?«S*L*:/StcaflSlb, ^rtL^mP= (X m ,Y m ,Z m ) RXf 

(m+i)p= (x m+1 ,Y m+1 ,z m+1 ) £fce>fc#>Tg£ii:i- 0 Y m ^a« 

-e«YM#^r^feS*^-e#^V^(D-c\ **oT^4v\ ^Ty-yi 1 3 i LT, 
17 ^ m/l/^^ h ;*M*fR ftiliJll?itJ»Jffiai"C* StbfcA (m-l)P©XJ&£|X m _ x 
S.I>'ZM^Z m _ 1 ; gr^tL-enx d _ 1 ^:^Z d _ 1 £ LT, !7-f avl^a h7«# 
R ft«Lh-elt*Jffi#"X?* $ ftfc ,£mP= (X m , Y m , Z m ) J: 5 X m ^t>7 m 
10 X d ;&I>*Z d Lt", h7^Hf RSa±T*^M^T^^tVfc^ 

(m+l)P= (X m+1 ,Y m+1 ,Z m+1 ) «fc«3X m+1 Xt« m+1 Sr-etL- : enx d + 1 XtJ f - 
Z d + 1 <!rbT, ffl^itSo *;fc-blB^JEfc:J:-»? % m£ ^— fitdte tf> 

7 1 4{C:|o^T(m-l)P£r;£g>5^t;^ tl3, fl 4 J; 9 >£#>T<b 

15 L s m7jS-^~efc*U3:\ «nr-l)/2)P©«Sr^7-s'7*7 1 2 ©^pgTrgiJfc^f bf 

<£v\> 

r £ fcl «fc «3 3 M+ 2 S £ ~ r. TMtt^PSffriOf^OfH**, S tt^Tfigft: 

^^C(Dfh^*tt, 3M+2Stfc5„ ^7J7— fg<D 5/ h©{t^0Tfe 

tltf, ^^5/^7 0 7 td*5V>T*D^(Df+^» N 77J//7 0 8 tllSSVvr 2ffi*© 

W-3Hi3fts^55i:ftSo i"^:b^ 6M+ 4 s <d1t»4^<&^ — jjto 

i#B©tfs> h ojfijas i T*&tLf^ 77^/71 o teifev^njf^ffSfft, 

^S-efe^o v^t^^-gi^^T^ 6M+4 s©tf3l*^S"efcSo 

5/7°7 0 4 N 7fs'7 , 7 0 5, 77^/7 0 6, ^7y^7 0 7, ^7^/7 0 
8 % 7f5'/7 0 9Mtt77S'/7 0 4, ^7S'7°7 0 5 N 77^7 0 6, 
*T-y77 1 0, 7f^7 1 1, XTy"77 1 2 ©life t) jgb©HJf&«u 



WO 02/39664 PCT/JP01/09781 

54 

7 —ffid© If y h S:) — l HJ £ ft % <DX\ Xr^7 s 7 0 2T'O2 fSFjf^tHSfi-i 

^s>^7 1 5?©!7>fi;I/J/ a h 7^S»P3*j»-b©^©X«lfc^S*fh3|[* 
IrtttAiiSi, ^©H-Itlt (6M+4S) k + 4Mift5„ :rtktt 
5 7*7HldOlfy^tfe5 0 HK^fctt, ff^AStt, S = 0. 8MSIt 
JMK&bixS©-?; £fc(DnWAn£iiS£^: (9. 2k + 4) M£&5 0 flijfcfir 

ffid^i 6 0 try b (k = i60) -efcjh/fif, JtiE^itox^ y 

b-C«*Dj;^-9. 2Mt45 ( A.Miyaji, T. Ono, H.Cohen, Efficient elliptic 
10 curve exponentiation using mixed coordinates, Advances in Cryptology 

Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) pp. 51-65 !7-fze,i^> 

15 J;-?- 1 OM^^ts^tt^o «iif7^7-Id^l6 0k'j/f (k = 16 0) 
■CfetLWf, i^e l 6 o OMt 45 0 bfc 

20 X d + lx Z d+lN X d _ lN Z d _ 1 Srffl*i-§T/l^=f y XAT'fc t) J.oi*i£T?£>;h, 

^*7^tfisi5i 0 3jc*5»t5jffi*ts[7cW2 0 3 v&mmtt&mttttn* 

lii im+s+it^!), zti&m&x* 7H»ffHWfP 2 0 2 # 7— f£ 
tWfc&gfcifgS:© (9. 2k + 4) M£fcJfc^Ttt3j&»K:/h£v\, Lfc^o 

■f^tf»tP©i«^^7Hm^^^f)-^*i:^^^-efo5o I =4 0M N 
S = 0. 8Mt^t5i:, -©tHf#tt*543«fc^: (9. 2k + 5 5. 8) Mb 
MfiUbZ^kfrX-ZZo Mt«^7-Id^i6 0lfyh (k=16 0) -efc 
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ffok LT!7-f m/Vv^ h^Mtf RftH£^JlU ^^r> K*$fe£:/HVvr-V=J bf 

— »ASrT7-r brffl^-f 5*^K:^St *5tf»ftttdo*3 16 4 

o M-efe t) > r *i £ Jfc^-c&is t ft s tw*ttgij« § nx v > -5 „ 

i~ft:fc>*>, ^*7- ffipfHWBi 0 3<^AtfcS^}C^VN§ttR^«!7-r^^ 
^fflt^ffiRftitLT, ^-^LhiMtLV^^A^^^ h7^^SRft^7)^^^^"5j 

ffi-efe -5 <£ 5 ft^>=r> y gy« r m^ji v t> «t v\ ^ # 9 — f£f+ ^gp 103 

ft^-hoD^PSrJx* 7— fflFtHrgB 10 3 icAJj-fS t M^xX ^—mnYMU 2 0 

r ^*5v £ tut * * 7 -f§.&dp= (x d , y d , z d ) (Dmmco 5 1> 

(X d + 1 ,Y d + 1 ,Z d + 1 )©Jffiai©5 *>X d +i&t5Z d + 1 , #}JM*lT-^£;ft,fc!7 
h 7 *M*f R ft^-hcQ^; (d-l) P=(X d _ 1 ,Y d _ 1 ,z d _ 1 ) cojffi^tD 5 

20 t>x d _ 1 xtrz d _ 1 «rtf-3i[u T?j>-mmxm£titixjj£ft,±7^^jui/=L 
&m&7cto2 0 3izis-*.t>iriit&m<Dm. d , z dN x d+lN z d+1 , x d _ ls 

Z d _i. xRTfiyZ*) l7>T^W>a h^^M*lRft||fe:*5V^T*f-^M^-e*^tL^: 
^^7^f^dP=(X d ,Y d ,Z d )^jaE^X d ,Y d S.t>*Z d ©^7n^^5o *7J^ — 
25 ffifW-ll^l 0 3«J^M*Kl*5V^^^ffi*iS4-^fen*:^*7— -»^i(X d , 

Ml 5 ^£9, j^# x> y X d , Z d> X d + 1 , Z d + 1 , X d _ 1% Z^^ 
^btl/c^r^-(CX dN Y dN Z d ^aj^3i-SM^7cf|5©*Q ! afcol/>T^-r5 0 

««tc§i3 2 03m vjx.Asis*. vy^mmnmm^^xmmmmxm 
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$ MtX # 7 -^^dP= (X d , Y d , Z d ) (DmM(D 5 ^X d &U?Z d , M&JMMX^ £ 
tltc?^^^*. h7^ltP3ii±©^(d+l)P=(X d+1 ,Y d + 1) Z d + 1 )©Ji 

Ji©^(d-l)P=(X d _ 1 ,Y d _ 1 ,Z d _ 1 )©^£D5^X d _ 1 ^t/Z (I _ lv ^7 
>«§"«L7t(x, y) U ^TO^«I-e*)-F«^*5VNT^^M^^^:^ 

7 ^Mit r it±©^p©77 ^ ^m^^ (x, y) -c% mmm* a 1 ,Y 1 ,z 1 )x^ 

th^tl^i~ 0 A^^n/c^7J7— ffi^di L"C!7-f h 7 *Mtf R E&lt&C 

10 *5{t5^^7-{^dP©T7^^MM^(x dj y d )T\ »*Jffi*Sr(X d ,Y d ,Z d )^ 

(x d ^ lJ y d _ 1 )x\ Mmmm^a d - 1 ,i d ^ 1 ,2 d - 1 )xtti^fim-ir 0 u-<^ 
;^s=, v ? r &m±.(D& (d+D p©77^ ( x d + 1 , y d + 1 > x% 
&mm& (x d + ! , Y d + ! , z d + ! ) -c-^H-enAih, 

15 ^77/1 5 0 1 iCfcVN-CX^! XZ d+1 ^$tl, TiM^So ^ 
Ty^l 5 0 2fc:J3V^Z d _ 1 xX d+1 ^if#£;^ T 2 |^^5 a 
7°1 5 OStfc^TTi-Tg^^ ^rtT 1 fciJX d _ 1 Z d + 1 ^T 2 
^ttZ d _lX d + 1 ^^^t&^^tUTi3l9 N L,fr&^XX d _ 1 Z d+1 -Z d _ 1 
X d + 1 $mM-£tlZ> 0 ^©^^Tii^^^^ ^fy7°1 5 0 4m>t 

20 Z d XxtmW&ft, T 2 fcfem£tiZ> 0 ^tj/7°1 5 0 5m^X d -T 2 ^ff 
H£3 0 r.C"^T 2 ^«Z d xdS*&#j$nT*3t). bfc^ 0 -cx d - X Z d ^f4-^ $n 
So ^©Igm^T 2 ^^^l^tLSo ^fy7°l 5 0 6m>TT 2 ©2f^ffi 
£*L-5 0 rrtT 2 lC{j:X d -xZ d m$ti-Cfc^ bfc^ oT (x d -xZ d ) 2 ^ff 
3f£*l5o ^©^^T 2 (C^^tL§ 0 7rj/7°1 5 0 7m^T 1 XT 2 

25 asffl-JTSftSo ^^-eT 1 fcfiX d _ 1 Z d + 1 -Z d _ 1 X d + 1 ^T 2 ^(X d -xZ d ) 2 

£ tLT 19 x L & o T (X d -xZ d ) 2 (X d _ 1 Z d + x -Z d _ 1 

^*5V^T4Xy^f4-^^|x5o ^©,WT 2 [^$llS 0 77y7°1 5 0 9iu 
^TT 2 XZ d + 1 ^f+3fL£;h,5 0 ---^T 2 ^«4y^*S.jjft$tbT*3t) % Lfcj&S 
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oT4yZ d + 1 jW3*£ft5o ^©U^T 2 !^a$tl5 0 XTyfl 5 1 0 \Z. 
*3V>TT 2 X Z d _ 1 mm tStl% 0 ZZT*T 2 (31tt4yZ d + 1 £ flX& 9 % 

bfc^oT4yZ d + 1 Z d _ 1 ^f+#$^6o ■^©jte^STgtJlfe^^tLSo 
^1511 te43V>TT 2 XZ d iStfJ|[$^5 0 r ri?T 2 ^«4yZ d + 1 Z d _ 1 ^*& 

tt£ti5 0 ^r^/l 5 1 2i^V^TT 2 XX d ^f^$ti5o irt'T 2 !:ii 
4yZ d + ! Z d _ ! Z d £ > b fc ^ o X4yZ d + j Z d _ x Z d X d ^Sff^ $ 

tbSo -tO^^^^^Xd^j^^tLSo 5 1 3^3ol^T 2 x 

Z d ^tmL$tL5o "-eT 2 (C«4yZ d + 1 Z d _ 1 Z d ^^^tLT*5«5 . bTttf* 
10 oX4yZ d + 1 Z d _ 1 Z d Z d ^fi-#$tL5o -tOjl&Jftj&S ^ Za ^$^§ o 

Lt#'ot^^^Z d WJ4y Z d + 1 Z d _ 1 Z d Z d ^^$^-CV^So 
V A \tt*7y7l 5 0 7^*3V^T(X d -xZ d )2(X d _ 1 Z d+1 -Z d _ 1 X d + 1 )^ 

ttt^TS'^l 5 1 2JC^T4yZ d+1 Z d _ 1 Z d X d *S*J|ft$tL, -t©«JE*f*S 

JzfB^WfciB^tbtbfcx, y, X d . Z d% X d + 1% Z d + 1 . X d _ lN 
0C d »Y d ,Z d )lcS8tt5ffi^T«5c*tL'53ffi*W:^T©3it)"efcSo ^(d+l)-Ptt 

2 7 N t2 8!r#5, Poffl ^ <t «9 . |c2 9^#5 0 bfc^o 

»3 0fc45. :^x d =x d /z d> x d + 1 =x d+1 /z d + 1% x d _ 1 = 
mzi&nZo x d =x d /z d t?*>5*s % y d ©^#^ii^-TSr fcfcj;?), 

25 Hc3 2i/«C5 0 

7 d = (AV,Z d+1 -Z^A'^X^ -Z,x) 2 - Jfc 3 3 

t u x d ;&m d £^-n-m 
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*yz M z d _,z d z d -m 3 5 

x d , y d , z d ^si 5v^vtcmmizj:V)J}-z_t>tiz 0 Lfc^o-c, 
m§mm (x d , y d , z d ) ©{ett^tf^ $ nit iz & 5 0 

5 _h|B^JI|Iii^^5/^ , l 5 0 1, ^7^1 5 0 5, 7fy^l 504, ;y 
7°1 5 0 7. *T-y?1 5 0 9, 5 10, ^^y^l 511, 

^151 2W7fy/i 5 1 3ic&\,^xmm±(Dmmmmm:&&mk-f% 0 

-hlB^JKW: 9 M+ S ©SUfi&i&S £ tS 0 r *U»5*^ 7 -ffiFW"»©tf** 
15 #9 — ^fhrnofff^A^fei^l 5 0 0MH^^^btLS o S=0. 8Mt 

ft, -LfB^KH£££,fc<-cfc, ±S35Hf^«fct)#^P>^X d ,Y d ,Z d <?5«s 
20 W-3H-e#ix«x d ,Y d ,z d co||[3iStt5E-e#5 0 x d .y d #Ji|BWJ|^»cj:i>.$: 
£ ibtiZm&l&Z X 0 , Y d , Z d Olfi^iiUft L, ^(DM^ff t tUtK d , 

3cku ttdRt^»7-Y^^ h^^sttnftisijb©^p^e, % x d , z d , 

25 X d + 1 , z d + 1 , x d _ 1? z d _ 1 ^mti-f-^T/i-^ y XM.iCO^^xmmi-^o 

^x^ h ^ lffiRM± ^^^ Xd> Zd> Xd + i> Zd+ ^ Xd _^ 
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x*7-mRTfir7^^/\'Z'=.}*7xMttn&m±<D&pfab, x d , z d , x d 

5 10 3 {Cjoit^M^^gP 2 0 3 ©^^75^^^^!+^* 

&m%:iiW-&<D (9. 2k + 4) M^{C^rii5^/h$l\ Lfc£SoT, ^ 

10 rcDft-^ifi^^j:^: (9. 2k+l3. 8) Mb M,m^ Z> ^ t ti$X% 

So Mx.teX7?7 — Ifidj^l 6 0 tf y h (k = l 6 0) Xfcftl^^ 7^77 7 — 

feSo "t^t^. f^tfffS51 0 3(DAtt5^7(-ffiV^-5tfR*l$«r7^^v 

^f7«Rii-efo5 0 fcfu {^f+s:§Bi 0 3 (Dft§i$<Df+i|-e 

fg-r-fc § «fc 5 ^ y §y*f R &m&m v t> «fc v \ ^ # 7 -{&ff-JS§|3 10 3 

25 ft^±CQ^P^^^7 7— {£#f^g|5 10 3 tdA^-rS £ftit^77 7— ^ff-3PfP 2 0 

r jjhmz&^xT 7 << ^mrnxm £ tut —m&dp= ( x d , y d ) 5 
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7«Rfti±©^(d-l)P=(x d _ 1) y d _ 1 )©Ig©Hx d _ 1 ^U 

(x,y) t*{d^(Dff^^jM^75§P2 0 3^^-5 0 MM[7c|P& 2 0 3ii^t» 
5 thfrm.M<viMx d . x d + lN x d _ lN x&tFyJ; 19 174 ^-fris*. Y^^WM Rft^ 

i ^^ 77 * >mmxm ztitz^zz? -^^dp= ( x d , y d ) (ommy d xom^ * 
m^mi eizx*). mmx. y. x d , Xd+lx Xd^m^^^ Xd , 

10 y d £ffi;0^5MM^©MS^ov^t£3J^5 0 

mmmjuU 2 0 3 TO, y-l'nvlx-;/^ ^^^M*fRftl|(^:43V^T7•7^>-M^ 
£ ^fc ^ 7J 7 —m&dP= (x d , y d ) 5^x d , 77^ £ n 

!7 h ^ ^Mtf R ft|§Lh<D,& (d+1) P= (x d + ! , y d + j ) ©Ii© 9 ^ 

15 (xd-Lyd.^OliO^Xd.^ ^7J^— fgFSt£fBl 0 3^A7t/£*Lfc!7 
-T^v^ h^^MtfRft^jKD^P^T^^^^Tr^bfcCx.y)^^!^. 
T<D^MXT 7 ^ ^JtfeWJdiSV ^T^Mg^i btLfc** 7— ffiFjft (x d , 
y d )^m^Ji-5 0 

*TyZfl 6 0 1 ^V^x d -x^fi-^^tL % Tjfc&^tl^o ^jr^l 
20 6 0 2^*3V^TT 1 ©2^-r^^^(x d -x) 2 ^f^-^$tL N T^^^So 
^ir^l 6 OS^joV^Xd.i-Xd + ^Sff^^^ T 2 imffitStlZ> 0 *T 
V?\ 6 04i^TT 1 XT 2 ^D-f $ ^ o lifTjiClid.-Xj^Tg 
tex d _ 2 - x d + 1 & tt^tltem £ tl X *5 t> , L ri* o T (x d - x) 2 (x d _ j - 

25 T4Xy^ft-^$tL N T 2 Ki»tt$n5. ^ryT-ieoem^TaC&s 
3 C ::tT 1 tii(x d -x) 2 (x d _ 1 -x d + 1 )CT 2 fctti/4y#*jh,^j|x»*ft $ 

HTfet), b^^oT(x d -x) 2 (x d _ 1 -x d + 1 )/4y^f+^$tL?, 0 



WO 02/39664 




PCT/JP01/09781 



x d + ! ) Mytmm £ tbTi^ 5„ fx d f*<£< 3E*r £ft^©T?A^ * frfc 

5 M (d+1) Pf±j^dPR:^PSrAnJ|[ U^t?*> So ^ (d-1) Pfct;£dPj&> £ j£P£3£3f 

Lfc^o-C, 8c3 0£#5„ r^x d> y d te!§|l 6 0«ioT4ifetiao 
10 _bfB^Jlifi^^5/^°l 6 0 4, 6 0 7 fc*5V^^TR#:_bO*j|[©f4- 

^y^i 6 o 2fc&\,^x^mfc±<D2mW(Dw\-m--m;&!&mbirz 0 &r 0 ^^ 

-<T«S^^/h$V\ 0!|;tWr.x;&7 — fl£d# 1 6 0 bf5/ hT'fctb^ 
20 — f§ff^^tf^*«*54oJ;-^ 1 5 0 OMiiirB^t ^tL§ 0 S = 0. 8MMI 
= 4 0M^{E^i~5i:M««7nOtHrfttt4 2. 8MT*fe«9, it55£*;277 — ffiFfl- 

25 m7tx%z> 0 ^<Dm&te—^mc&jKic&mb%:&nwmm±irz> 0 
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= ( x d + i.y d + i)^5^x d + lN T7^>-M#T:^^H7t !7^,i^>^ 
M«fRft*JiOjfe(d-l)P=(x d _ 1> y d _ 1 )©5*,x d _ 1 S r tii^i- 5o 77^ 

irLT, ^P<D2f^2P^ff-^^ 0 --T^P«ltj^ffi^^V^(x, y,l)<t 

u u y Mtt r an (Dmmm iz& #52 ©4^ ^v^2fg 

10 ^2P«rff-3fi-5 0 ^TiyZf7 0 3iLT, * # 7 — ffiFff 3SSFB 1 0 3CA*^fc 
tfRMJ^D^P^^^^^z 0 2 -e*tf>/c,£2P£. N ,&©|a(P,2P) £ LT^i- 

IS: I kxXr—tiLdWy hMk&-WctZ>fa¥ofr&¥mi^ -®rf fitted t 
&<9, ^77^7 14^ff<. -tUltM^75'7 , 7 0 5^<o XTy? 
15 7 0 5iU, SESfcl ^rlii^n^-tir^o ^r^7 0 6 i:LT, — ft© I 

#S©tfy h©^so-efc5^i-cfcs^SriRl^i--5„ -£-<£> if s> h©^ 0 Tr& 

T5//7 0 7 -4? < o -t © If V V (Dim* 1 X*htlt$* 7 5/77 10 -cff < „ 
X7^7 0 7at, MBmmiZ.£Qi$c£frltL&<Dm.(mP, (m+l)P)^b,kmP<!; 
^(m+l)P©^D#mP+(m+l)P^^^ N /£(2m+l) PRIM'S. ^©177^^7 0 
20 8-=fT<o r^T% AD#mP+(ra+l)P«, *>=t* y MtitPJ ft j» 

fc,£©*£ (mP, (m+1) P) tf>b,6mP© 2 ^» 2 (mP) &ff*V \ j&2mP£tWi-5 0 ^© 
f77y/7 0 9--lT<„ rr-C\ 2«(„,P)|j:, ^^^VySfflRiicIt 

25 0 8 -C^fe fc,£2mP ^7^/7 0 7 X*?kibti& (2m+ 1 )P&jfe©jfc 

(2raP, (2m+ 1 )P) t Lt, ,£©|@.(mP, (m+ 1 )P) <Dftt> <9 ^fe®rf- £ o -^©^^p 
S'/7 0 4'nI5 o ^2mP N ,£(2m+l)P, M.mP&Z$&(m+l )Pi^xM 

*M*^^:*5V^■r*$i^TV^5, 7f;y/7 10tlt, l**«aHc<fc 0*$iT,fc 
,£©#l(mP, (m+l)P)^e>^mPir^(m+l)P©ipa[mP+(in+i)pg r fT^VN N ^r(2m+ 
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7 11 t LT, It^Ml^J: "9^$nyci^^)*l(mP, (ra+l)P)^^(m+l)P©2 
<^2((m+l)P)%fT^V\ .&(2m+2)P£ff-»i-5 0 ^^#^^^r7°7 1 2^fT< 0 
5 rr-C\ 2^2((ra+l)P)(^ ^^^7 yillRftl©WIIi^lt§2^I 
0<^^;^MV>Tfh»^tb§ 0 XTy7°7 1 2irLT. 77y/7 1 O-e^fe/c^ 
(2m+l)P^^7"^^°7 1 l.T:^^fc^(2m+2)P^^©a((2m+l)P, (2m+2)P) t b 
,£<E>|a(mP, (m+l)P) CD-f-t^ t> f-^i-So ^(D'&^T y ~7* 7 0 4 ~-M-5o r 
Z1T% ,&(2m+l)P N ,&(2m+2)P N ^mPS.D«^(m+l)P{i^Tl^f^M^{^:*3V^-C*$n 
10 Tl^ 0 *7-y77 14k bT, ltf«*l-e^^^fc^^JI(mP, (m+1) P) , 

(m-DP^ttf^Si-^ft^XMlXm-l^t^ZM^lZm-l^^feSo ^<Dj&^ y ~? ■ 

7 i 5^n< 0 *Ty7>7 i 5iit, vmtmmmcjoitzACm-vp 

15 femiZte^^X MBMU^^£frltc& com (mP, (m+l)P) t^LT, ,&mP,&t>\& 

(m+i) p£ !7-y ^i-v'^ f ^ r «_h-er 7 Vliti $ n/c&fc:^^ U 

^tfh^:tlmP= (xm,ym) &tF(m+l)P= (xm+1, yra+1) £ & b fcfctfl iSi- 0 

"C\ ym&tFym+ltt, ^di* y §y^*R ft^ttf^Mfl^&f-t 5 JPlt^5£,£t>' 2 ffiF 

20 /713-4t< 0 ^y/7 13itT, 17 >f i/Vi/a h y *Wfa R ftl&Jb-CT 

hy^mH Rfti±T'77^ >M^-e*$^fc^(m+l)P= (x m+1> 
y m +i) <fc!)x m+1 £x d+1 £UT, ttJ^7i-5„ £fc_hfE^Jl|I^£ 9 N mi:^ 

<fc5 0 ?Lti*Ty?7 1 4JC*5V^(m-l)PSr**5|»K:, mi 3, gfcl 4©^ 
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Ji©2ff|J|©ffJ|fl :T ;-&3 o ^ynV y lffiRfti©|fMit^it5 2ffl® 
^5£©ff#-J:te. 3 M+ 2 S -efe S o Hft© I # S © tf y h O jjt^S o -c-fc 

5 ftfcf, *T-y77 0 7IC:fc^T;&n#-©tt3tt % ^5^7 0 8}C:*o^T2lg3¥© 

fc5. l-fcfc-fc 6M+4 S <Dtm*.#&&k&Z 0 fit© 

I#g©tf;y h^^l-Cfotlf^ ^2/^7 1 OlC:}3^-Cj!JD3£©fr3*ft, 

10 0 ^7^/7 0 5, ^fy/7 0 6, ^rj/^7 0 7, ^7^70 

8, ^rs//7 0 9^Ifi7fs'^7 0 4 % 7/^70 5, ^ry/7 0 6, 
^^^^7 10, ^7^711, *T<yZ?7 1 2 iJjgU©®*^ 
7 —fid© tr ^ K S"). - LMi ©-e % ^r-7^7 0 2 "C© 2 <&# (DwtMM. t 

15 X7^7 15T"©!7^ ^^^^RlftllJiO^o^S^fUSS^^ 
i*f-AtL5<b, £#©fr£fi«: (6M+4S) k+15M+It^5 0 ->fk 
^*7Hld©lfyMt3b5 0 fh#*S«, S = 0. 

tf»ftltt, I =4 0MUmt^mhhtL^>(DX\ ^#:©ff»fttt*3^J:-^ (9. 
2 k + 5 5) MktliZo ffidtf* 1 6 0 tf y h (k=16 0) tf*> 

20 iL«T v JlSB#flg©T/V=fyXA©ff»fij3*5j;^i 5 2 7Mi45, 

«d©t> h*>fc?»©ffJ|[*i:bTtt4Jj:*9. 2Mift«. A.Miyaji, T. Ono, 
H. Cohen, Efficient elliptic curve exponentiation using mixed coordinates, 
Advances in Cryptology Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) 

pp.51-65 iat, v^^ ; v^=u y 7 xmtmmMfc&^T, v -f > k vm&m 

1 6 ObTy h (k = l 6 0) T-*>tL« % -®^^7HSFffH|[^j5fe©W-»ttd3*5 
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Xh. x$7— i&dRWsf^sisi/a. Yy^mM F\$iM±.<ngJ>frh, x d , 

5 XA^rffiv^Tl/^^ <fcv\, 

9-H&tHKB 10 3 icjsitSJteSHlCTcffl 2 0 3 ojffi^Tctd^^l+^i 
»2M+S+ I XtbVs Z.fyAtM^^^— m\WM2 0 2 <DjS55£* 7J 7 — f£f+ 
^tC^JfetUr*© (9. 2k + 55) M^tCjfc^TrarSa^hSV^ UfctfSo 
T, fSFtmiFBl 0 3(D^^^-^f+»^^^W-^»«, — 

10 {^tf»^©i^it^^^-^ff-^^M>feff^*^«i^lll^T-fe§ 0 . I=4 0M, 
S = 0. 8Miig£tSh r.©ff3SLfttt*3j3«t-?: (9. 2k + 9 7. 8) Mb 
BatSCims, - fttd^l 6 0 bfy h (k = l60) T?fc 

w0^^7^— ffiFtmtmie«s«:fH|[*tt 1 5 7 om^^. fltRft&t u-c 

H9<DH»i)te, Affi^JS<Z>1*RM^ UT!7>f3iyu^3. b ^ *S*ff R te^Sr, 

rt^p ©ft#ffl id *. e> n 17 ^;^> =u h 9 * mm r h ^^imx & 5 

20 ^>-=f^ yM*»Rft»&JBv>fcfc©-e&5. ^*7- ratHWPl 0 32**;*77 — 

(x d ,y d ) &$tW\^titfJ-tZ> i b<DXhZ>o ^fiy—iUdRXf^^^Ju^^hy 

25 ^2 0 2^^g(tl^ o iH^*7-MHi2 0 2|j:SltlSofc7*7 
HKd £#;t£>*lfc!7^:avw>^. h 7 *^*&R#&-htf>;6P >=M y Mtt 

R ftlfcK::fcV^T*HejEB*-C3fe $ ftfc* 77 7 — ffif ^idP= (X d , Y d , Z d ) (Dj&IHtf) 5 "h 

x d &t>*z d , M&mmxm £ *x/c * > =r^ y m*i r (d+D p= cx d + 2 , 
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^=^;^=l h7*SttRftlftJi©j£P«\ bflfe 17 W x/i/v/ a h^i^fR 

P=(x,y)^*5< 0 j*3£*;&7-' fgff*gR2 0 2tt % X d , Z d . X d+lN Z d + 1 , 
x£tfy$rJffi««7naS2 0 3fc#x.3 0 Jt6««5n^2 0 3 fi-^^ ^HfcM^O-ffi 
5 X dx Z dN X d + 1% Z d + 1> xMy «t t) 17-rrc/Ui/^ J. ^^Mtit REMk:*5V^ 
T T 7 4> ^jEfeflt?* $ tLfc * # 7 — fflFjftCdP— (x d , y d ) (DMM x d y d ^^55 

n^^^^-f^(x d ,y d )^ff-^^i:LTtt5^i-So 

KfcHl 7|!1J:5 % tt*x,y.X d ,Z d .X d+1 ,Z d + 1 aS4h^b^fc»frfcx d ,y d 

# ^ -ffiF/SdP= (x d , y d , z d ) (D&m 5 -bx d xtfz d , M&mm-eigt £ n?t ^ ^ =f 
^ !)iigRift«±o^(d+i)p=a d+1) yd +1 ,z d + 1 )©jis[oHx d+1 M 

Z d+1 , ^^/^— fgFff-fMfBl 0 3 \zAJj£titc^^=t* ]} MtfR gMSLLflD^pfc 
15 77^ ^MtlT^bfc(x.y) ^A^J U «T©^lit?T7-f ^jffi«*5V^T^* 

^ !/iffiRfti±©^P©77^I^^(x ( y)^ »«Jffi**(Xl,Yl,Zl)t? 

^77 7-f^dP(DT7^^^^(x d Mon ) y d Mon )^ H&JMM* a d ,Y d , 

t< yStlRfti±©^(d+l)P©77^1I^( X(1 + 1) y d + 1 ) t% JtJH&** 
( x d + l > Y d + 1 ,Z d + 1 )^n^n^-f- 0 

^75'7 s 170 1tfcVtX d X x «^^ ^^T!^^ * 

^^170 2K^TT 1 -z d #tl-J*<**L3o - T a fcttx d xas 

te#ft£*v-C*5«9 % Lfc^oTX d x-Z d dStfJ|C$tta o US^^T^;: 

£;ft5o 7 0 4^*5VNTX d -T 2 ^tf-^$tL-5 0 :rt«^^T 2 

fct3:Z d x3iS«HfiStLT43!5 % L^oTX d -xZ d ^ff*£*L<5 0 
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2 iM^tl§ 0 *^$/?°l 7 0 S^&^TXd + iXT^f+l^;?!,^ 
Crt^^^T 2 tffi d -xZ d £fri,X$o N L 7t # o TX d + ! (X d -xZ d ) 

TT 2 ©2f^ft-I$ii§ 0 ::T^^T 2 &m(X d -xZ d )^M£nT:fe 
<9. Lfe^oT (X d -xZ d ) 2 ^ff-^$f l/ ^ o ^W^^^TsM^il 

(Ctt(X d -xZ d ) 2 ^»$nT*5 9, Lfc^oTX d + 1 (X d -xZ d ) 2 ^f-t-^^^^ o 
^:©^^i/^^^T 2 ^^|rt^tL§ 0 ^^i/^l 7 0 8m^TT 2 XZ d + 1 

mm&riZo ^c-ci^^t 2 ^{ix d + 1 a d - x z d ) 2 3$*g-#3£*L-c£5 ^ , 

U#oTZ d + 1 X d+1 (X d -xZ d ) 2 tfwtM&nZ>o ^(D&^mu^^ZT 2 ^ 
tfft^tlSo 7 0 Q^joV^TaXy^ft-^tL-S, ^ ^^I^V?^^ 

T 2 (d{*Z d+1 X d + 1 (X d -xZ d ) 2 /$SM*,£;fxT£5i9, L£:^oTyZ d + 2 X d + 1 
(X d -xZ d ) 2 ^fh3f>£*l,5o ^t<D%g%:frUi?*?T 2 \zW7&h£thZ>o XTv7*l 



2 (C(iyZ d+1 X 



+ 1 A d+ 1 



7 1 0 fC:fe^TT 2 XB^fJ-^^o 
(X d -xZ d ) 2 ^^^tL-C*5'9 > L/c75So-rByZ d+ ^d + j (X d -xZ d ) 2 #Sf+JfE£ 
ti^o ^0,W^^T 2 IM^|XS 0 XTy-?! 7 1 lt£:io^-CT 2 X 
Z d dSfHj[$tLSc -r.-CU^^T 2 .HlH:ByZ d+1 X d + 1 (X d -xZ d ) 2 tf^|*|£ 
H-C^SO, L7c^oTByZ d+1 X d + 1 (X d -xZ d ) 2 Z d ^ffjf £*l5o 
U^^T 2 lCt&«fi$nS„ 7 1 2tC*3V^TT 2 XX d dSfHj[$n-5o 

rrT'^^T 2 |C«ByZ d+1 X d+1 (X d -xZ d ) 2 Z d £3%** $ tL"C*5 t> N Lfc 
2 s oTByZ d+1 X d + 1 (X d -xZ d ) 2 Z d X d ^rf-|f£tL3 0 W?** T 4 

t*&*rt$nSo ^y^l 7 1 3 }d*5V>TT 2 XZ d rtS£H*$;ft,5 0 
^*T 2 K:teByZ d+1 X d + 1 (X d -xZ d ) 2 Z d tltiS 5 , bfc^oT 

ByZd + iX d + 1 (X d -xZ d ) 2 Z d ^ff^$tL§ 0 ^©^m^l/^^^T 2 (C 

xTy-fi 7 i 4K:te^Ti^;**T 2 xsasfr3*$ft5 0 r. 

^T 2 {U£ByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d 2«^ilT^ 0 % U#=oT 
sByZ d+1 X d + 1 (X d -xZ d ) 2 Z d 2^f+»^tLS 0 l/^ * T 2 (C 

sByZ d+1 X d + 1 (X d -xZ d ) 2 Z d 2tfmti£ftT&<0^ Lfc^otl/ sByZ d+1 
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7 1 6te*SV^T 2 XT 4 «SfH|[*n«. £:i^US?;**T 2 |Cttl/sByZ d + 1 
X d + 1 (X d -xZ d ) 2 Z d 2^lx^^T 4 ^ttByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d X d ^ 

M**mistix*s*>* L7t^oT(B y z d+1 x d + 1 (x d -xZ d ) 2 z d x d )/ 

5 (sByZ d + j X d + 2 (X d -xZ d ) 2 Z d 2 ) tfS ff Jf $ ^ § o ^©»l/^T 4 l^ 
T 4 Rltt(ByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d X d )/(sByZ d + 2 X d + 2 (X d -xZ d ) 2 Z d 2 ) 

ByZ d+l x d+l z A x d - x z d yx d 

sByZ d+l X d+i Z d (X d - xZ d f Z d * * b 

#ti-#£ft5„ ^dt'l/^^Tj JcfiX d x-Z d asj&fft $ tLT jo ^) , Lfc^ct 
Zd + l CX d x-Z d )^W-||[$.tLSo ^(Dfegk&UzS^fT 4 fc*Hft£jh,<5 0 
^1 7 1 9tCiSV>TU'^^T 1 ©2*as«-3(t$tb5 0 ^CTV^^T^m 
(X d x-Z d )*S«^*n"r43 9, Uc^oT(X d x-Z d ) 2 ^ffI^^5 0 
^^Txtfei^ ^y^l 7 2 O-fC^VNTTj. XT 2 ^tH|L$tL5 0 
! iCtt (X d x-Z d ) 2 # ^^T 2 t ttl/sByZ d + 1 X d + x 



d + 1 



(x d -xz d ) 2 z d 2 & ^th^en^m s n-as l ^ o r a d x-z d ) 2 / S B y z 

x d + l (X d -xZ d ) 2 Z d 2 f>mW£frlZ> 0 ^(Ol&R&l'isX&T zlZ-feMZtiZ,. 
*Ty7l 7 2 1 fc*5V>TT3+T 4 ^t|-||[Sn-B„ ^:T'^7^T 3 l:tt 
X d + 1 (X d -xZ d ) dSU^^T 4 »CttZ d + 1 (X d x-Z d )^^^tLfe^$tL-C*3 
Lt^oTX d+1 (X d -xZ d )+Z d + 1 (X d x-Z d )^ff^^ tL5o ^^^^ 
^^TjJCftttStbSo XTyZfl 7 2 2 fJl*5V^TT3-T 4 ^ff.3f^^ L(5o >■ 

rf^^T 3 iC{SX d + 1 (X d -xZ d )i5^^T 4 ^Z d + 1 (X d x-Z d )^ 
tb^n»iW*nT*5 9. ^^ S oTX d+1 (X d -xZ d )-Z d + 1 (X d x-Z d )^ff-^ $ 
frlZ* * ©fe**S ^ T 3 fc«rtdStl5. ^T5'/1 7 2 3m^T 1 X 

T 8 #fWSixS 0 ^^T^^^T 1 t«X d+1 (X d -xZ d ) + Z d + 1 (X d x-Z d )^ 
1/ * T 3 fix d + 1 (X d -xZ d ) -Z d + j (X d x-Z d ) # *tlseti#m tStlT3SQ s 
L^^oT{X d + 1 (X d -xZ d )+Z d + 1 (X d x-Z d )}{X d+1 (X d -xZ d )-Z d + 1 (X d x- 
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(Cl^V^TT! XT 2 ^»^5 0 ^r.-Cl/v 5 ^^T 1 ^«{X d + 1 (X d -xZ d )+Z 

d + 1 (X d x-Z d )} {X d+1 (X d -xZ d )-Z d + 1 (X d x-Z d )}^i/^^T 2 }cltt(X d x- 

Z d ) 2 /sByZ d + 1 X d + 1 (X d -xZ d ) 2 Z d 2 &ZrtL^tlfeM£}hX*5 <9 . LTfc^oT 

5 (A> - Z d ) + A', +1 V£j - xZ d )}{Z M (X d x -Z d )- X d+1 (X d - xZ d )}(X d x - Z d ) 2 

sByZ d+ ,X d+l (X d - xZ d ) 2 Z 2 

-ms 7 

(x d , y d )^^£Tm7n£*VTV^ 0 

JLfBmiRli; 9^£>nfcx. y> x d , z d , x d + 1 , z d + 1 frhv4^sv^ 
^ h7^^tP9fta^*5ft§^^77^^©T7^ >-M^(x d , y d )(3l*D{t-5 

(A + x + x?" + x M )( Xd -<°" - x) 2 = ^Of" - X> 2 -t38. 

(^+x+xr"+^. 1 xxr"-^) 2 = s(j;r"+j) 2 3 9 

20 - x rf+1 )(x d Wo " - x) 2 = 4Byf"y -t4 0 

J^ 0 " = - Xxj*" - x) 2 /45y -|4 1 

<b&<5 0 r--?x d Mon =x d /z dN x d + 1 =X d + 1 /Z d + i, x d _ 1 =x d _ 1 

25 <D5££#5 0 

3 0 ::tx m Mz m fHy^ yM#linft«i±©^pomffip^inPO*t»Jffi*tc: 
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Zm + n W:^ > dtji y P9 &m±<D&P(0 (m+ n ) (,„+„) P© # J&^gH-js £X 
= x ms X n /Z n = x n> X m _ n /Z m _ n = x m _ n j&S^3e©£# % X m+n /Z m+n = 

mi 3, Sl4ij3<i, r^tX m /Z m =x m , X n /Z n = x n , X m _ n /Z m _ n 
= x m - n tf*m(Db2. X m+n /2 m+n =x m _ a t>3FSCift5. X' m _ n 
10 /Z' m _ n =X m _ n /Z m _ n = x m _ n £.^fc1-<DT\ x m _ n (Dtiff^Mli: bT 

X 'm- n .Z' m -n^tot±V\ m=d N n = l t LT-hfB^^SrMV^T y d Mo n CO 

SiM.j^Mz.j.^iiu Xl=x,zi = ii:*5< - tfcost&W 

-So 

_ {^(^,*-Z rf ) + X dH (X d -xZ d )}{Z d+1 (X d x-Z d )-X d+l (X d -xZ d )}(X d x-Z d ) 2 



ByZ d+l X d+l (X d -xZ d y-Z, 



1 r-,2 

d 



15 



-14 3 

x d Mon =x d /z d x&zi)K MKmw<D\m$k&mt>i-B&}Xy A Mod <D#mt 

X M °" _ ^iL^tlg^ ~^) 2 ^ mAA 
" ByZ d+l X M Z d {X d -xZ d fZ d 

20 (DMJ&mmz-D^Xte. K.Okeya, H. Kurumatani, K. Sakurai, Elliptic Curves 
with the Montgomery-Form and Their Cryptographic Applications, Public 
Key Cryptography, LNCS 1751 (2000) pp. 238-257 kHEifc£*LTV>3 0 ^tilzjz 
5*. »7^^atU, y d =s-ly d Mon ^x d =s-lx d Mon + aC DM 

25 ^ - fejCggzgl^^ 

sByZ d , x X M {X d -xZ d fZ 2 d ~ 

••• 4 5 
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x d = (ByZ d+l X d+l Z d (X d -xZ d )*X d )/(sByZ M X M Z d {X< -xZ d ) 2 Z d ) + a 

■■■mi 6 

^rt\ x d) y d iiil 7i!5 4if)^5o Lfc^ot, V-{=£.;Ui/^ h^* 

mm?* mmiz. »* § t ^ ^ (x d , y d ) <r> m &±xm7u §tit v > ^rtt^ 

5 § 0 

_hffi#JHI«^^^^l 7 0 1, ^=ryrf\ 7 0 3, ^^s/^l 7 0 5. *T y 

-f\ 7 0 7, ^^5/^1 7 0 8, 77y^l 7 0 9, y~7\ 7 10, s> 

Zfl 7 1 1 , 7T77°1 7 12, ^^5/^*1 713, ^T^^l 714, 

7"1716, ^7"5/7°l 7 18, 7rs/7"l 7 2 0, ^^5/^1 7 2 3RXf*T 

10 -7 7°i 7 2 4\zte\,^xmm±<DmWe>nn*%:&mb-tZ> 0 ^rsx/i 

7 0 6M^fj//l 7 1 9(31*5V^T^-|5W±:<D2^#<Df|-^*^^^^i-§ 0 

15 (Dtf#4?fM, ^PS^Ji(D2^(Dfh^#^S^^|5S{*J^^5c^»(Dff#^ 
& I JilB^JlIIfil 6M+2S+I CDf+^fi^^^^-T-So ^nteiib^ 

^*7- f^W-^cDff»fii:M:-<Ttt5^}c/h$v\ #!!^«:;*;*7 7— -fttd^ 1 6 0 
t'y b-efcn«\ ffiit^^7^— {§ff^(Dff^i«*5*5j;^ 15 0 OMmtMM'k 
btt5o S = 0. 8M, I = 4 OMif Sf5 iltf 7£©fHitt 5 7 . 6M 

ft , _bfg^JilS £r t b t£ < X , _hfBf+3* sfcfc: XVM-^.b Hfcx d , y d ofit^ft 

wx%tii-£x d , y d (Dimm7hx$z> 0 ^<Dm^&\,^xte—ft9tmzm7nfc&m 
25 ■*>*■>** y§y*tRM^©^m^;^^fo£ s <wh£< tsitia^ ^ 

X d , Z d , X d + 1 , Z d + 1 ^^t|^i-S^3t^^7--^ ; &f+^(D^ ; S^oV^Tf^0^ 
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i*£*:&7HBFf|-JMB2 0 2m *#7H&tf3W51 0 3MA^£tlfcT7^ 

R ttfcfcl^T $ *Lfc * 7J 7 -«PjfedP= (X d , Y d , Z d ) CD 5 feX d Rtfi 
5 Z d% »JKM*-e«$^fc*^=fp< y^+SR*^Jb^(d+l)P=(X d+1 ,Y d + lJ 

z d + 1 )o5*>x d + 1< s.t>*z d + 1 ^m^-r5 0 ^fy/sieax, 

10 £f+J?L-r5 0 ^-T^Pf*lt^M«(CjoVNT(x,y,l)^LT^U 

8 0 3 £ LT, ^*7-^IHa51 0 3{CA^^tLfcfflRft|t_h(D^Pir^^y 
:t°8 0 2T^fcfc^2Plr, jfe©|B(P,2P) £ Lt^jfttS 0 - - T?jfcP£.tW&2Ptt 
*r^M^T^^tL-CV><5 0 7rs'/8 04 tbt, 'IS I t ^^yHlclWf^ 
15 h*^^— ftf S*^5d^2Rl3EU -Stil^T^8 13^< 0 — 
^t^T3'7 , 8 0 5->fT< o 0 5 £ UT % ^ I & 1 ±t^JD 

^7^:7° 8 0 6i Lt, ^77^— I #g<Dtf> hOf^Ot^S^lffeS 

Of^lT*illJ7fs'7'8 1 0-4t< o 7T^7°8 0 7 iLT, MJ^SSMJ: 
20 <9^^tL/c^(D|E(mP, (m^)P)^^^raPi^(m+l)P(D^O»mP+(m+l)P^f^VN N 
(2m+l)P^ff^-r5 0 ^0«77^8 0 8->fT< 0 £ An£mP+(m+l) 

*i^=r^ y^«fRilbj»©^jffi«fc*3»t5^#^^v>-cfff||[$tbS 0 *^s> 

37° 8 0 8 i U, *HBJffi«fc:.fc 3*£jh,fcj6©*&(niP, (n,+l)P)^f 5 ^niP©2ft» 
2(mP)&*rfrv\ ^2mP^rtf^i-§ 0 ^©f7r y7°8 0 9 V^< o 2-» 

25 ^2(mP)«, vmwpi&mcD&mmMiz&vz 2tem<D&&,&m^x& 

0 7 T^it)fc^(2m+l)PSr^©a(2mP > (2m+l)P) £ Lt, /£ <Z>|& (mP, ( m +l)P)©ft 
*>DK:fc#r« 0 W77^8 0 4-I5 o — T \ £2mP, jft(2m+l), -A 
mP^.t>^(m+l)Ptt^Tltf^^{c:*DVNT*^^TVNS 0 ^^y^8 lOi UT, 
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to&mmte x x> m £ titc&vm onp, (m+D p) ^ b ,&mp t & (m+i) p©#n3f m p+ ( m +D p 

mP+(m+l)Pte s -^^rfV y Stff R ft,^(D|t^M^(C*5{t 5>5JP|f ^5££#! ^TffJfE 
£ft£ 0 ^5/^8 1 It LT\ Itf^I^J: «£ftfc£<£),m(mP, (m+l)P)/^ 
5 fe,£(m+l)P<D2fg^2((m+l)P)£fT&V\ A (2m+2)P£ft-#1-£ 0 -^©^^^iy^ 
8 12— fr< 0 2te3*2((m+l)P)f3\ ^ SfltR**©^^* 

Jcdsit5 2fflF3|[©^;S:ffiv^lHt$ii-5o 7fs/^8l2tLt, ^rs'/S 
1 0 T ^ JC) 1t /& (2ra+l)P ^r>;^8 1 I^jH**:^ (2m+2)P £r (7) jjfi 
((2m+l)P, (2m+2)P) t tT, ,to,m(mP, (ra+1) P) Oftto «9 fc»#A"f S 0 ^(D^k^T 
10 ^804 5„ j& (2m+l) P. jft (2m+2) % &mP%.X$M (m+ 1 ) Pfji^Ti 

M (mP, (m+1) P) h , *H^Jffi«T?* $ ftfc,£mP= (X m , Y m , Z m ) «t 5 X m X <J?Z m * 
timXiMZ^U, lt*J£ai-C«Sftfc^(nrfl)P=tt m+1 ,Y m+1 ,Z m+1 ) 

20 tit J; 9 3M+ 2Si/«C5 0 ^rt'Mlif Kf±©il©|flf , S te^rPSfls:_L 

^^f+^i(i N 3M+2Stfe5 0 I #@ O^j/ b©f 0 ffen 

«\ ^^5/^8 0 7 iCcm^TADjItoff-SI*. ^-^5/^8 0 8iC*3V>-C2ffiF3P(?Dtf 

25 hO^Sl-efcftli, ^7"ix^8 1 0^^oV^TiP^(Z)tf-#*, ^t 1 ^ 

^8 1 1 {C^V^T2{^69|f#»^Mi^So tfttJ%6M+4 S Off Hl^S 
jfc5Te#>5o ^ N -fftO^-^(c:joV>T^6M+4 SCDff^i^gT^So ^t 1 -/ 
7*8 04, ^7^/805, 77^^8 0 6^ ^7^8 0 7, 77^7°8 0 8, 
77J'7'8 0 9M^75'^8 0 4 N ^75/^8 0 5, 77^/8 0 6, *T 
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3^8 1 0, J* ^3^8 1 1 % XT-y?S 1 2©j^9igL©lHl^:fi % (^^77- 
m<D\fy — 1 |«]<t&£<£>T\ 77^8 0 2-e©2fflF0l©fH&Jfc&TJ<* 

^fr©th»*tt (6M+4S) (k — 1) +4M+2St«5 0 ££-?ktt 
5 *#7-Htd©K> h*TJfe5. m-^*S«, S = 0. SMS^i 

m«t>btL§©T% ^©fffHttfcfcdSJ:*- (9. 2k — 3. 6) Mi^5 e ft| 

fctf^tf^Hfidas i 6 o e > h (k = l 6 o) t?&*u3\ _Lfa3MH©r/w=ry 

*tL-Ctt*5j:*9. 2Mt/«c5 0 A.Miyaji, T. Ono, H.Cohen, Efficient 
10 elliptic curve exponentiation using mixed coordinates, Advances in 
Cryptology Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) pp. 51-65 

15 J; ^1 0MiMtfcti5 o 09* ft**;*/ 9—' ttdj&s 1 6 0 tr y h (k 

= i6o) -?$>tit£* ^v*z^-mmxm<D§t»mik)otej:j:i e 0 oMt 
Tt, ^^9— fidxtf^-r^y^^. h7*§mmtom±(D&Pi>>^ x d , z d , 

20 x d+i. z d+1 ^rtH^7i-5T7P=fy x^Tfct) J-o^jfefctLJi, io7/u=ry 

w: 1 6M+ 2 s + 1 -?h v , ^fimm^n^-m^mm 202 

tfWITfc&SfcW-lfci:© (9. 2k — 3. 6) M.b\zit-<x\-±Z>M^bi$\,\ L 

0M N S = 0. 8Mttef5^ -©tW*f4*5*JJ:^ (9. 2k + 5 4) M 
i^5rt^T-#5 0 ffid^l 6 0 f> h (k=16 0) X* 
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^r77^ LTtiS^i-^^fc^i^Sf+^itt^J;^ 16 4 OMt* 

10 (X d w ,Y d w ,Z d w )^ff^LI±57J-t-So 7*7- IB[dRU«!7>r^i">3. YJ^Wfc 
RftaJtcD^P^r^TJ^— f&tUfSPl 0 3(dA7Ji-^xhi^il7 7J7— JlfB 2 
0 2^JetL?rgft^So *5fi^7J7— f^ff#§15 2 0 2 H:S»t5lo^* 7— -fitd 

(C*3 V >Ttt^M^-e^ $ ^7 7J 7 —{£,&dP= (X d , Y d , Z d ) <omm<0 5 d 

15 z d . znr^ > v mtm mm±<D&d (d+D p= (x d + ! , 

Y d + i.Z d + 1 )©ffi«©5t>X d + a &U«Z d + 1 Srtl-3(t-t-S 0 £fc. A7u£tL7t!7 
h77SHRiftt±©^ N -§-*.e>nfc!7^raiyl/^3. h7 7lifl 

P=(x,y) £*5<„ ^5S^*7— flSFft3t$P2 0 2«: % X d , Z d , X d + 1 , Z d + 1 , x 
20 Xt5ySrJffi«tt5nSU 2 0 3 t^^^ 0 ^^TugR 2 0 3 btltimM<DiWX d , 
Z d , X d+1 , Z d + 1 , xXVy± 9 y-fm,^^ h 7^S*HRfti»J!:d3V^At« 

$ tbfc ^ * 9 -»j«dp- (x d w , y d w , z d w ) <Dmmx d w . y d w &m d w <d 
^ # 7 -H»^t (x d w , y d w , z d w ) srw-jFje* h it ttjTj-r § 0 

25 #ttl|I]l 8 «t <9 % Mix, y, X d> Z d , X d + 1 , Z d + 2 35#;L btbfc^^ 

x d w , Y d w , z d w &ftt)i-%mmm^w&m^^xm,w-fz>o 

7J 7 -fg,£dP= (X d , Y d , Z d ) <Dmm<D 5 t>X d &t>*Z d % #11^^ £ n*:* ^ =f 
P< yillRftI±©^( d + 1 )P=(X d + 1 ,Y d + lj Z d + 1 )©Mg05*>X d + 1 St>' 



15 



20 



25 
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*^±T'*^^^V^T^^M^^#^ btlfc** (X d W , Y d W , 
{x d ,y d )X\ ^J^«^(X d ,Y d) Z d )-e^:^tb*i- 0 y^tf RftUJi 

©^(d-i)po77^nir(x d _ 1 ,y d . 1 )t % mmm*(x d _ 1 ,Y d _ 1 , 

*^VZfl 8 0 l^:fe^TX d Xx75Sf+Jf£*K ^^TiM^o ^ 
^;y^l 8 0 2{e:jo^TT 1 -Z d ^ff»$tL^ 0 CCtl/^^TjtfiXdX^ 

mztix&y^ vtcfr^xx d x-z d mmtstiz> 0 t(D^m-^^^T 1 iz 

tSfl&o ^TS^yi 8 0 3 ^£^TZ d Xx^ff^^^ U-v^^T 2 fcltejfft 
^^5o ^T^l/l 8 0 4f-:^TX d -T2;m»£;ri3o CCTl^>^*T 2 
(C«Z d x7)S^$^T*D^, b7t7)So-CX d -xZ d ^ff^$^ l/So ^(Dmgk&Ui/ 

^it'^^Tjt «X d x-Z d £tlX3oV, L7t^oXZ d+1 (X d x-Z d ) 

TX d + 1 XT 2 dmW-£tl& 0 ^Z-XUi/*?T 2 tttX d -xZ d 7)S^$tLT*3 
•9s UTh^o-CXd + j (X d -xZ d )7)Sfm$|x§ 0 -?:(D^^l-'v J ^^T 4 (C^ 

^y"y^i 8 o 7K::k^TT 1 <D2fii^Ji:£;ft5o ;:x^^^ 

T^CttXdX-Zd^lrt^tLT^ot), L7t7)SoT(X d x-Z d ) 2 ^f+^^tL^>o ^© 
^^^^TjM^ilSo ^s^l 8 0 8iZte\,^XT 2 (D2mmm 
£ftZ> 0 ^^XUi?x?T 2 ^X d -xZ d tmmtS*lX$$iO , b/c^oT(X d - 
xZ d ) 2 ^ff#$tl5o -^^^L/^^ T2fc ^ $tL5o 77j , /180g 
^*3VNTT 2 XZ d ^ff^^^ 5o rrt^^T 2 lCtt(X d -xZ d ) 2 73S^$ 
tLT*5«9, b/c^ orZd (x d - x Z d ) 2 ^ff-^$tL6o ^<Dfe$ktfUi;x?T 2 \Z 
^^5. ^ir^l 8 1 0{CioV^TT 2 XX d + 1 ^ff^$tU§ o ^rX'l/v 1 
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^T 2 K«Z d (X d -xZ d ) 2 dS^$tlTjo"9, Lfc^oTX d + 1 Z d (X d -xZ d ) 2 

mmtsn&o ^:<d^^^^^^T 2 \z.W^^ 0 ^y^i 8 1 ltz:*^ 
XT 2 Xl d + 1 t>mmtStlZ> 0 ^^T^^^T 2 ^^X d + 1 Z d (X d -xZ d ) 2 dm 

^l/^^T 2 tM$^o 8 1 2m^TT 2 Xy^fff $tb-5 0 

r n?I/v ? ^^T 2 ^«Z d + 1 X d + 1 Z d (X d -xZ d ) 2 tmmiSfoX&*) % Lfcj&S 
oTyZ d+1 X d + 1 Z d (X d -xZ d ) 2 ^ff^^tLSo ^T©^^ ^ T 2 

£*L5 0 8 1 3fc*5V>-CT 2 XB^ff^^+ a § o r:t^^^T 2 

(dttyZ d + 1 X d + 1 Z d (X d -xZ d ) 2 fimm£tlX&V N Ufc^oTByZ d + 1 X d + 1 
Z d (X d -xZ d ) 2 ^l+#£;ft5 0 ^©W^^^T 2 «^5o 
18 1 4(C1*dV^-CT 2 XX d ^ff^$tl5o w^-ei^v ? ^^T 2 (z:^ByZ d + 1 
X d + 1 Z d (X d -xZ d ) 2 ^^^^-c*5'9, bfc^oTByZ d + 1 X d + 1 Z d (X d - 
xZ d ) 2 X d ^f+*$tL-5o ^(D^tfUZ/XfT 5 \zW^£tLZ>o ^T^18 
1 5^*5VNTT 2 XZ d ^tf-^^tl§ 0 ^CTTl-v ? ^^T 2 ^«ByZ d + 1 X d + - l Z d 
(X d -xZ d ) 2 ^|ft^tXT43«9 , Lfc^oTByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d ^ 



T 2 Xs^fh^nSo ---e 



2 {C«ByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d 



^^fi$^T*5«9 N U/c^oTsByZ d + 1 X d + 1 Z d (X d -xZ d ) Z Z d dmW£thZ> ( 



8 1 7(Cj3^Ta XZ d W^ff#^tL 



5o ^^^Z d W^^sByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d ^TO^tlT*3f9, Lfc 
^oTasByZ d + 1 X d+1 Z d (X d -xZ d ) 2 Z d ^f+^$^§ 0 ^©g^V^^ 
T 2 tM^ti5o ^"TyZfX 8 1 8}C*D^XT 2 +T 5 ^ff^$tl-5 0 
v^T 2 (d«asByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d £S ? T g fc^ByZ d + 1 

X d + 1 Z d (X d -xZ d ) 2 X d ^n^n^m^tlX^^) s Lfc^otasByZ d+1 
25 X d + 1 Z d (X d -xZ d ) 2 Z d +ByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 X d t>mM£ frZ> 0 ^<D 
$gg:&X d W lZ.fe$i 8 1 9tC*3V>TT 3 +T 4 ^tHf$nS 0 
wCT'W^^T 3 lCfiZ d + 1 (X d x-Z d )^i/^^T 4 ^ttX d+1 (X d -xZ d )jJS 
«Htt$*LT*55, Ufc#oTZ d + 1 (X d x-Z d )+X d + 1 (X d -xZ d ) #fl-0| 3 ft 3 . 
; e^^i/v?^^T 2 {z:^$tiSo xT-y?! 8 2 Oic*5V^-CT 3 -T 4 ^f4- 
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»^tL§ 0 rrf^^T 3 i:fj:Z d + 1 (X d x-Z d )^lx^^T 4 ^ttX d + 1 
(X d -xZ d )aM*tt3*lT*5»J % Ufc#otZ d + 1 (X d rZ d )- X d+ 2 <X d -xZ d ) tfS 

T a XT 2 mm&tlZ> 0 rrr^v ; ^^T 1 {c:|j;(X d x-Z d ) 2 ^l/v ? ^^T 2 ^ 
5 «Z d+1 (X d x-Z d )+X d + 1 (X d -xZ d )^^$tLT^?), Lfc^ 0 -c{ Zd + 1 

(x dX -z d )+x d+ j (x d -xz d )} cx d x-z d ) 2 tmm£nz> 0 ^©^^s 

W^^T 1 M{Z d + 1 (X d x-Z d )+X d + 1 (X d -xZ d )}(X d x-Z d ) 2 ^l/^^ 
T 3 }C«Z d+1 (X d x-Z d )- X d + 1 (X d -xZ d )^^$tLT*D^) s L/c^oT 
10 {Z d + 1 (X d x-Z d )+X d + 1 (X d -xZ d )}{Z d + 1 (X d x-Z d )-X d+1 (X d -xZ d )}(X d 
x-Z d ) 2 tmm-£tlZ> 0 ^(Dfa^Y d W izmti&tlZ> 0 L7t^ oTYd w tc« 
{Z d + 1 (X d x-Z d )+X d + 1 (X d -xZ d )}{Z d+1 (X d x-Z d )-X d + 1 (X d -xZ d )} (X d x- 
Z d ) 2 tmm&tlX\,^ 0 X d W ^i^T^^l 8 1 8^joV>TByZ d + 1 X d+1 Z d 
(X d -xZ d ) 2 X d + asByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d #M#$3£ft N *KD&mM& 

15 nfrthf£\,^<DX\ ^(Dim^W^Hx.^^ 0 i d w ia^T^yi 8 1 6\^^ 

-CsByZ d + 1 X d + 1 Z d (X d -xZ d ) 2 Z d #M#$3$ft. *<D®3m as^fcftftv^-^ 

ft Zftt&mm (X d w , Y d w , Z d w ) ©«S£T«5E cFftTV^'So 

-hfB^JHlC «t f?#;t£>ftfcx N y N X dN Z d% X d + lN Z d + 1 frto7^^;l<^^ 

20 h ^ xmm pj AUK: 43 rt 5 * * 7 H»/Ko«fl« (x d w , y d w , z d w ) \z & * s 
^T?S>So ^(d-l)Pf4/fedP^e>^CP3r«J|[U*:jfet?S>« 0 

25 ::tx d =x d /z d , x d + 1 =x d + 1 /z d + lN x d-i = x d _ 1 /z d _ 1 -efei9^ ~<o 

m, X n &(JtZ n tt*y^ y^R*^_h(D^p© n ^nP©tt^M#^{t-5X 
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Rffi/fLhcD^J^Cm+n)^^^ m, 
nttm>n*^-nSEl^-efcSo - ©5£teX m /Z m =x m , X n /Z n =x n . X m _ n / 

-eo^i u-c5*<*&vvrv<>a 0 ifci 3 V iu^<^ :o%x 

m/Zm=x m , X n /Z n =x n . X m _ n /Z m _ n =x m _ n &^(D 1 £ , x m+n /z m+n = 

x m+a rai!5t5o X'm-n/Z' m -n = X m _ n /Z m _ n =x m _ n ^^fci-(D 
T\ x m _ n ©|*JBJffi«fc LTX* m _ n ,Z* m _ n &fcoT£V^ m=d, n=l i LT Jbfg 
10 ^SrffiV^y d ©*«t t)X d _ 1 S.t5Z d _ 1 ^*U Xl=x,Zl=l£*5< Z.kK£ 
9 s Sfcl5Sr#5o x d =X d /Z d -CfcS^, y d o^-eirii^-r-S-i:^J; tU IK 
1 6 tJfeSo k LT, 

7; = {Z rfrt (AT rf x-Z rf ) + AV,(A', - xZ rf )} {Z^, ( JST rf x — Z rf ) — A^ +1 ( X,, — xZ d )}( A' d x -Z d ) 2 

-14 7 

15 £ U 

Jf; = ^Z, +I X rf+I Z rf (X, -xZ,) 2 ^ -14 8 
Z; = By^AT^Z,^ -xZ,) 2 Z„ - » 4 9 

k-TZk (X' d ,r d ,z' d )=(X d ,Y d ,Z d ) £fc5„ *^=r^ ySl«fR*«lJb©^i: 
7^^^^ h7*aM*Rfil6±<Z>/&i: ©afrJfcBWfctHOV^Wu K.Okeya, 
20 H. Kurumatani, K. Sakurai, Elliptic Curves with the Montgomery-Form and 
Their Cryptographic Applications, Public Key Cryptography, LNCS 1751 
(2000) pp.238-257 t|Bt$nTV^. ^ttl^X&k. li^7^haH 
T> Y d W =Y' dN X d W =X' d + aZ d W , XtfZ d W =sZ' d k V ^5 H«#& « . fefc £ 

25 17 = ( A„x - Z„ ) + Jf rf+I {X d - xZ d )}{Z rf+1 ( X d x - Z d ) - X M (X d - xZ d )}(X d x -Z d f 

■• WC5 0 

X'J = ByZ d+} X d+1 Z d (X d -xZ d fX d +aZ w d - |5 1 
Zj =sByZ d+l X M ZAX d -xZ d ) 2 Z d --m 5 2 

mj;5 3E*rfntiJ:v> 0 irT, x d w , Y d w , z d w «m 1 8 ©MKa 5 
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(X d W , Y d w , Z d ™)(Dm>lkxm7u£thX^Z) n £ fc^5 c 

±fB^Mf3:77S/:/l 8 0 1. ^Xiy^l 8 0 3, 77 S /:7 0 1 8 0 5, 77 
^1 8 0 6, ^7*^1 8 0 9, ^7^/18 10, 77^18 11, 777 
5 ^1812, 77^1 8 1 3. ^y^l 8 1 4, 77^1 8 1 5, 77* 
1/18 16. 775^1 8 1 7. 777/1 8 2 lM77y71 8 2 2^*^ 

i s o 8^^xmm±<D2mn(D^mmz&mti-% 0 mm±(DMMRxf 

Alts ftzt. ±B#«ttl 5M+2S©fMiJ|Sr J fiaffct- 5o -n«^3g7 
S = 0. 8Mt^t5t^7G©fH[i{ii 6. «H7 

Z d W (D^fi-#r^^X d W , Y d W , Z d w ©tfa^-c* 5o ^ 

20 (x d w ,y d w )tf5i:, x d w , y d w tf±tmW^£<0 #*.e>*i5***k<5 J: 5 
f-X d W , Y d W . Z d W ©ft£ii#> U ^©tt^ff#T-^n^X d w , Y d ™ z d w ^ 

*^oae^7^^s©««r/h$< tsriia^ 775.71 s 1 373^7 

25 7^1 8 1 6fc**tS^©WJ|[»|!Utfrf-6ri:*-C#5o 

x d + i» z d + 1 SrtU^7i~5T^=ry XA^ov^Ti&^i-§ 0 

Si 0 ^^IrlMB 2 0 2©«5S7^7^ffj|:^ i . LTn 
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57^^^ h7*S#l*RliMIJb©/kPj&>& % X d , Z d , X d+1 , Z d+1 ^tU^i- 

— f^tf^2 0 2 (iijol/^T_blBTyV'=f y Xi\^r^v , >7^< ;*7J 7— fitdj&.U 5 

17 x;Vv/ 3 h^M^RMJhc^P^ib. X d , Z d , X d + 1 , Z d+1 ^t±l7Ji- 

.X7J7 — fgfh^^l 0 3^43{t^^im7C^2 0 3 C0^im7c(c:^^^f+#4 
(41 5M+ 2 S-efoi9 N m^f^3t^^^— ^ti-^152 0 2C0^^>57^— fMf 
Hi-i&^&ff^fiO (9. 2k — 3. 6) M£{;ii:b^Tte5;6^/h£v\ bfc^ 
o-C, f&f)-J?|F|5 1 0 3©^7 -{gfUf^i&S&ffSfE*^ ^^7^^ 

10 — m^nm<D^m*%7—{n^mz&mtew\-mmtm£m^hz>o s = o. s 

Mir^^-f"-5 roff^i^jo^oct^ (9. 2k + 13) M^f 
T-#5 0 F!l^f^^7— flSddS 1 6 0 try h (k = 1 6 0) -C&tU3\ rcD^TJ 
flaFfff3f^i^S^fHPS« 1 4 8 5Mi/i5„ ffR&|§i£ Lt^-Yx^-7a h 

15 £-ffi*a$&JBl\fc;*;&7 — fgfl-#;£?$fe<irffiV>T, *7J 7— ffiF^iSrir = tT^l^ 
fill l|l»JteAffi;frffl©*fRtti^£ UWx/^7 a f-7^M*f Rft,!^ 

20 ^e^v y®*iRiMl£fflv^c<b<D-c&3 0 fgfMf£i$i o 3^, 

(x d ,y d )3rff^Ltti7J-t-3o — {fid&O??^ :xvu>^ h^^^fRS^-h 

<£>,&P £r:*#7— ftftJf£fll 0 3^A7J-TSi:i^il^7J^-^f+#|Hi2 0 2^^ 
25 ^gttJfcSo S>^#7 — {£f+IT£|52 0 2 te^tt^ofc.X77^— iitdi-^^b 
^fc^^A-v-^ h7^M*f Rfti^JKD^P^b^^xfV M*f Rft/it}-*3V^T 
afllT't $ ttfc * 77 7 HSF AdP= (X d , Y d , Z d ) <Dmm<D ^>ibX d ^Z d , J* jg 

$ ttfc * > =r ^ y M*f R mm±<D& (d+i) p=Cx d + 1 ,y d + 1 ,z d + 1 )© 
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(d-l)P=(X d _ 1 ,Y d _ 1 ,Z d _ 1 )©J^#(D5*>X d _ 1 ^Z d _ 1 ^^-rSo *3t, 

©/SSrtf^P=( X ,y)t*5< 0 ^^7^frH|P2 0 2(t X d , Z d , X d+1 , 
5 z d + i> X d _ 1 , Z d _ lf x&U?y£^H^7G£lS2 0 3-{C#^5 0 J&RfcTclfB 2 0 
3tt**&nfctf*©*X d , Z d , X d+lf Zd + lf X d _ lt Z d _ lf xXtfy* 

dP=(x d ,y d )(DMMx d ^t» d (D«7n^^T^5o *#7*-fflPtf-JffflJ 1 0 3fi!7^ 
*fcBl9te±9, gft, y, X d , Z d , x d+1 , z d + 1> x d _ 1} z d _ x ^ 

* 5 ^^ dP = (x d , y d , z d ) ©mi 5 i=>x d x o?z d % snfcty^ 

15 ^I«Bft||±©^(d + l)P=(x d+1 ,Y d + 1>Zd + i) ^ HXd + iM 

z d+1 . *t&mm-v&zihit^=i* ysiiR«±©^(d-i)p=(x d _ 1 , 

Y d -i,Z d _ 1 )(DM^©5^X d _ 1 ^Z d _ 1 . * #7 1 0 3lZAt) 

ft r m^±(D^p(DT -7 * >mm z (x, y ) r% jtM$m«r (x l , y 1 , z 1 ) x^n^en 

»77,yi^( Xd Mon )yd Mo n) T% mmm z(X d ,Y d ,Z d )x^ 

25 yd-^-e, it«M*Sr(X d _ 1 ,Y d _ 1 ,Z d _ 1 )T?^n^n«'t-o ^Vyff 
R MLL©* (d+1) P©77^ ^jffig* (x d + 1 , y d + , ) T % ttf^f £ (X d + 1 , 

Y d + 1 , z d + j ) -c-ttL-enx-t-o 
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T^Hftiili, ^ry^l 9 0 4(CjoV>-CZ d XX#$ff^£*i„ I/i/7^T 2 
5 td^g-^F^ixSo XTyZfl 9 0 5 ld*5VN-CX d -T 2 dS»|.^$ ( 5 o 

l^-^^T 2 K:»jpA$tl/6o 9 0 6 fc^V^TT 2 cD 2^Sft^^tl^o 

r tru s?* * t 2 m x d -xz d a**^ $ ti-c & <o , u & o r (x d - x z d ) 2 # h- 

10 T^Tg^fH^nSo r^t^^^T 1 t[JX d _ 1 Z d + 1 -Z d _ 1 X (1+1 ^ 
l/v ; ^^T 2 ^^(X d -xZ d ) 2 ^^^tLfe^^tbT*5«9, b7b^ 0 -c(x d - x z d ) 
2 (X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )^S-3¥*tL5o ^©gl^v^^Tji^^ 
9 0 8 }d*3V^T4BXy36Sff-^^^ / § o ^©jg^ ^ t 2 

(d^&^^ttSo ^ry/l 9 0 9tioV>TT 2 XZ d + 1 ^f|-I$tL?.o ^CCl^ 

JgJPr^Uv^^T 2 ^*Mft*iX5o ^T7^1 9 1 OiC^^-CTjjXZd-j^ff 

4ByZ d _ 1 Z d+ i^ s tf-#$tLS„ ^<DffiMfc^i?X?T 2 lZfe$i&tl% 0 y 
y°l 9 1 1 id&^TT 2 XZ d ^ff^^tL§ o rr-ew^^^T 2 ^}*4ByZ d _ 1 
20 Z d + 1 #»*A£ftT:i3!K U7t^oT4ByZ d _ 1 Z d+1 Z d ^ff^$^§ o 

^l/^^T 2 (^tt^Jl§o ^Ty/l 9 1 2fJl*3V^T2XX d ^ft-3¥$n 
So CrT?W^^T 2 t-tt4ByZ d _ 1 Z d + 1 Z d dS*&^$nT*3t) N Lfc#SoT 
4ByZ d _ 1 Z d + 1 Z d X d ^ffJf *tb5 0 ^0»>^^T 3 M$^^ 0 ^ 

'rv'fy 9 i 3 tjoVNTT 2 xz d 7!)Sff^$^L§ o rrt'^^Tjiift 

25 4ByZ d _ 1 Z d + 1 Z d 3&S#*ft&ftT:fc9, bfc* s <>-C4ByZ d _ 1 Z d + 1 Z d Z d *Sffl-Jt 

T 2 Xs3astf#$tLS 0 m-CU-^^Ta^^ByZd-iZd+jZdZd^tMftSn 
T*5!9, Ufc^oT4sByZ d _ 1 Z d + 1 Z d Z d ^fh»$tL5 0 -5:©^^ * 
T 2 ^*&trt£ft3o ^X^7°l 9 1 5{C:^Tl^;*^T 2 o^5^ s fi-|?£n3o 
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l/4sByZ d _ 2 Z d + ! Z d Z d #Jff#$nSo * T 2 fcH&jjft$jft,a o 

^^ H1 6^*5^-CT 2 XT 3 ^ff»$tLS 0 ^tl/^^T 2 tij: 
l^sByZd.jZd + jZdZd^U^^Ts^mByZd.jZd+iZdXd^^tt^ 
5 Wtl^^ ^^-C(4ByZ d _ 1 Z d + 1 Z d X d )/(4sByZ d _ 1 Z d+1 Z d Zd)^ 

T 3 + a^fH|[Sn5. "^^*T 3 Kte(4ByZ d _ 1 Z d + 1 Z d X d )/ 
(4sByZ d _ 1 Z d + 1 Z d Z d )^«Ktt$tt"Cd3«3 % Lfc^ot (4ByZ d _ 2 Z d + 2 Z d 
X d )/(4sByZ d _ 1 Z d + 1 Z d Z d ) + aiSff3f$tL5„ *©*Mi# W?**x d fcfc#i 

io 9 i si^ti/^^Tj xT 2 36SffHf$tbS 0 r;r^ 

^^T 1 m«:a d -xZ d ) 2 (Xd-iZd + j-Zd.^d + ^dSu^^Tafctt 
l^sByZd.jZd + jZdZd^tL^n^^tLT^?). Lfc^oT (X d _ 2 Z d + a 
-Z d _ 1 X d + 1 )(X d -Z d x) 2 /4sByZ d _ 1 Z d+1 Z d 2 ^f+g:$n^ 0 ^O^iSi, 

15 X d + 1 )(X d -Z d x) 2 /4sByZ d _ 1 Z d + 1 Z d 2 ^M^nT^§ 0 lsi?X*x d \ZLt& 
9 1 7^V^(4ByZd_ 1 Z d + 1 Z d Xd)/(4sByZd_ 1 Zd + 1 Z d Zd) + 

±B?«lfcJ:!lW^x, y. X d , z d . x d + 1 , z d + 1 , x d _ 1% 

20 (x d , y d )»ci3»tS«^T«5E*tb5MW:£JlTOii-t)-efe5 0 A(d+l)Pf* 
^dPfC/SPS:AP3fL*:^-C*>5o /&(d-l)Pf2^dP^b,£P£^ VfcMX*&?> 0 * 

^jCx d M °"=X d /Z d . x d + 1 = Xd + 1 /Z d + 1 , Xd = 1 J 

25 x d = 1 /z d = 1 -efc«K -^^Ai-^^i^it)^^©^^^^-^, 

*4 2*r»S. x d Mon =X d /Z d T-fe§^\ tt5Gft*0|elftfrJ*b-*-Stt 
^y d Mon ^^»<!:ii^-r5^i{cj; i9 N t5 3t^ 0 
x**- =(4HA,^^)« tl Z w Z,Z,)-t 5 3 
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Plitol/^ttt, K. Okeya, H. Kurumatani, K. Sakurai, Elliptic Curves with 
the Montgomery-Form and Their Cryptographic Applications, Public Key 
Cryptography, LNCS 1751 (2000) - pp. 238-257 Klffift££nTV^ 0 »J;5h 
mm^tf&s, a t LT. y d =s- 1 y d Mon XrJ«x d =s- 1 x d Mon +a©8B«iS 

Jrf = (^_,Z rf+1 -Z d _,^ rf+1 )(^ -Z d x?lAsByZ d _ x Z M Zl -#5 4 
x„ =(45j/Z d+1 Z d _ 1 Z rf A' rf )/(4^Z £/+1 Z d _ l Z rf Z rf ) + a---^: 5 5 

10 ^T^Tc^ftS'CL*: ic#5 0 

±fB^JlRtt^^2/7° 1 9 0 1. ^f^yi 9 0 2, ^^5/^1 9 0 4, 

/1 9 07, ^rj'/l 9 0 8. 9 0 9, ^Ty^l 910, 

7*19 11, ^T->71 9 12. 7fy71 9 13, 7T771 9 14, 7fy 

7i9i 6^7771 9 1 8te&\,^xmm±<Dmw<Dtmm&&mtirz> 0 

^7-77*19 1 4l^i/^*Kff±©255cjRir©thir*Sr^^-rSo ^RB#_b 
©;!)P3fcftt*»*©SJ-JttWt, #IWJ^i!ljf<7>frlf:I;, 2m#OW-3|L*Rt53fi5c. 

20 jiffi^wfii 3m+s + i ©th^*^ii^-rs 0 ztuzmmx*?— 

{tfflr&<D$r$tmktk'<Xli&7t>>fr/b£\/\ mx-ltx*?— j&dtf l 6 0 if y h t? 
fotlfcf, fflffM|LOfffJ|[*»4^*5J:-tl 5 0 OMm kMfiHi>t>tbZ> 0 

S = 0. 8M. I =4 OMiiftt 5£M*tK7G<0tf-Jf*«:5 3. 8Mtfe>5, 

25 ^TC-etTV^Ci^^^tVfCo 

ft, JbfB^Jifi^t < ±f5fr#^^ t fc 9-^*Lb*lfcx d , y d cojfi^fr 
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text, ^yzfi 9 o sibm*.*Ty7i 9 i 4ictei?z>m&<DnnmL&mM 

^ x d , z<i> x d + 1 , z d + 1 , x d + 1> z d _ 1 

R Aftfc&t ^T*rt*j«*-« $ ftfc ^ * 7 -f»jftCdP= (x d! Y dl z d )©^i d M 
z d , IfMiT^^tifc^y^ yS«R*j»jb©XS(d+i)p=tt d+1> Y d+1 , 
10 z d + 1 )©5^x d + 1 ^t^z d + 1> ^M^T^$nfc^^=r^ yM*gRftH_b 

^(d-l)PKX d _ lj Y d _ 1 ,Z d _ 1 )©5t>X d _ 1 ^^Z d _ 1 ^ t t5^ i - So 

o l 6 £ Lt, ^;t£>*Wb<7^A-^ h9^S«Rftjtft±©jfeP4-*^=r 

15 1 0 0 2iU, AP©2#£2P«rtf-*i-3, ::«Wim^ t ( X) 

V^T2fflF^2P*ffHri-«. ^y^l 003 tLT, * # 7 -tftHWP 1 0 3iC 
*j3iStl1tfilF}&m±<D&PbXT-y?'l 0 0 2T?*»fcj£2P£ N ^^ffi(P,2P) 

0 4£LT, SEffcl fc**^— fitdOfc^ iSrrsa^S ^^J^L, 

0 0 5-fT< 0 7f?^i 00 5iLT, *»I *HH*D*« D XTy^l 0 
0 6 LT, ^ ^ 7 -fltt© I # g © t> h ©fifths 0 -Cfc 5^1 -efe 5 j^&jfl^ 
So h ©ft^S o X-lbtUl^ 0 0 7^< o ^<£tf> b<Dm*l 

T«^T>^10 10^< 0 XT^1 0 0 7iLT, »*Jfi«fcJ:?)« 
£*Lfc-;£©*&(mP, (m+l)P)^^^InPt^(m+l)P(DJD»^ 1 P+(m■hl)P^^T^v^, jfc 
(2nH-l)P«rfh3M-* 0 t©»^^ 1 0 0 8M?<, APgmP+Gn+DPf^ 
*V=f* y^R*a(D^M^^*5fT5W^^V^Tit#$^5 0 
7° 1 0 0 8 i: LT, WjfUlfci^ShUOftdP, (m+l)P) 7^,&mP<D 2-» 



20 



25 
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%2 GnP)Srf?fcV\ ^2mP3r£Hg1-5 0 ^©^7y^l 0 O 9^<„ ^CT\ 

-Cfh^^tLSo ^fy^l 0 0 9tU, ^7j//1 0 0 8^fe^2niPi:^ 
7 y 7° 1 0 0 7 X*&£>*1&, (2m+ 1 ) PSrjfe©|i. (2mP, (2m+ l)P)tlt, (mP, 
5 (m+l)P)©jtfc*)mt5 0 0 0 ^ ^ T\ 2 mP, 

,&(2m+l)P, J^Rt^/S(m+l)PW:^-CJ^tjKJffi*^^:*5V^T**^^TV^S 0 *T y 
^1010^ LT\ Jt«Jffi*lJ:± ^£*Lfc£©a(mP, (m+l)P)^b^mP<b^ 
(m+l)P©;ftn||mP+(m+l)P£?T&V\ jfe (2m+ 1 )PSrH*3iti- So- ^©f7fs/71 

oi tr< 0 *p^mP+(m+i)Ptt N ys»*HR*«io*t«jaE«^ 

10 ^sttSiP^^Srffiv^Tffaif^nSo xrs'/l out UT N JWJgjffiflKeiJ;*) 
ift£;ftfc,&©j|B.(mP, (m+l)P)^fe^(m+l)P©2^^2((m+l)P)§r^T^V> N 
(2m+2)PSrff^i-5 0 ^Oi7T-7 7 , l 0 1 2^t<o ::t\ 2 f£^2((m+ 
1)P)I4. -=e^=f> y^#ffRftj»©ltJ^M«l^»t5 2{g3S©^5^J3^Tf+Jf 
£ft5o ^73'7 , 10 12tLt, *T*y^l 0 1 0^?£*btLMA2m+l)?b* : T 

15 5/^°l 0 1 ll?^fefc^(2m+2)P^^©,m((2m+l)P, (2m+2) P) t Lt, ,£©l&(mP, 
(m+l)P) CD-ftt) 59 |cfe#rt-f-So ^®t^7^1 0 0 4^M5 0 :rt% 
(2m+l)P N ,&(2m+2)P % ^mPS.tJ« J ^(m+l)Ptt^Tl^J^M^i^*3V^T*$HTV^5 0 
^7?/7"l 014i LT, t*j^M*T*;gE£;ftfc,£©ffi(mP, (m+l)P)a^ ,£(m- 

i)p©*t*jffi«i;:ssit5Xffi«x m _ 1 Rmmm^z m _ 1 ^n-enx d _ x x 

20 O^Zd-x ir-TSo ^©^^s^l 0 1 3— ff< 0 xTyT'l 0 1 3 t LT, I* 
J&ffi*"T**£;h,fcj£inP= (X m , Y m> Z m ) «fc y X m %.m m &^fr^:ftX d Rm d t L 
t\ lt^M^7?*$tL7t^(m+l)P=(X m+1 ,Y m+1 ,Z m+1 ) <£ f X m + 1 %.ZP 

775/710 1 4t21*5V>T(m-l)PSr*fcSBgt:: % I13, gfcl 4©45r5£ 
X ^feti cfc^U m^*Sfe"Ca>ixW, ((rl)/2)P©fi^fs'7'10 1 2© 
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(m-l)P^*fetfcJ;V\ 
3f©fmE4^St*5 0 t*b*> 6 M+ 4 S ©ffli«t — 

io ^^i oiitt^x2i*n<Dim*#imk*z. t^6M+ 4S © 

ff-^S^ST'&So V^tL©^{d*5^Tt> 6M+4 S©ff^4^^ T ^ So 
^^ 1 004 « ^^1 0 0 5, Xf^l 006, 77^1 0 0 7, 
^y^lOOS, ^f^l 0 0 9Mli7f^l 0 0 4, ^^10 0 
5, ^7^1 006, ^y^l 0 10. 77^10.11, ^^10 1 

^1 0 0 2f©2»||-Ii^7^1. 0 1 4T^( m -l)POff^{^®^ff 
Jtfi£#2tie:A;ft5£. ^froSf»*tt C6M+4S) k+Mi*5 0 
tt^*7-H[d©lfy hMX&Z 0 -jRWRltt, W**Stt % S = 0. 8MS^ 

^fr©fHI**±*5*Jj:* (9. 2k + 3) Mi4S. FUx. 

20 tf^*5-«d* leoifyh (k = i 6 o) xhn^ ±mmw(DT;u=ivx 

<^LTtt*5j;^9. 2Mt45„ A.Miyaji, T. Ono, H.Cohen, Efficient 
elliptic curve exponentiation using mixed coordinates, Advances in 
Cryptology Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) pp. 51-65 

»ttfc*5j;^i 0MtJB,at>&n5o Ml^7-fd^l6 0lf^ (k 
= 16 0) -Cfcntf, -O^^^HSFfW^feoW-Mtt^j;^! 6 0 QMt 



25 
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ft* ffi^TJ^— {£f+#£|5 2 0 2 {'joV^T±fe^Jl!I<DT/^=i']; Xi^$r^V^/^< 

Tt>, ^^y-Idlif^^x^^a h7^SffiRfti±©»r^ x d , Y dJ 
X d + 1 , Z d + l ^rttl^/1-§T/V^y XAtfet} JLo^-cfetbtf, ioj/Pny 

ftft-^tPl 0 3lc3otfZ > mM'lM7C%K2 0 3 <D^m7n}Cl^^ff^:» 
ttl 3M+S + I XfoV N rtLfi^5S^^7^— {£ft|^|$2 0 2<£>fft5g.7<7}7— fg 
f+^^^^f+»»(D (9. 2k+l) MtJ-it^TteS/Wcl/h^l^ b7t^ 0 
*7J 0 3©^7- fgfFJIfc^&fffJIitt, iS51^^7^ — 

io mwu(Dmm**7—mimz&^?mwAtmsmmx:hz> 0 i = 4 om n 

S = 0. 8Mt^t5i, r©fhJ|[*tt*5*5j;-?: (9. 2k + 5 6. 8) M<h 
H.3t& ^-et S 0 #I;U;£*7J 7—' ttd# l 6 0 f ( k = 1 6 0 ) X&> 

n«r, z.<d*%=7— m\m^mfm%mi.^^^\ 5 2 9M£&5„ t»pq* 

20 ^>-^yiffiRftMV^ 0 ^7J7— f§f+#§|Sl 0 3j5$;*7^— 

n z> mmm<D& t lt^^jm^^-^ k. b^tc**? a d w , y d w , 

^P^r^7J7— fgff^Pl 0 3^A^7i-S ti*iS^7J7— f^f+^2 0 2/^to, 
25 ^tf&So i«5i^7J^— <f£f+||£fl2 0 2fe%:moti*Z)7-mk-!5-x.bn 

mm.Mxm ztitc^z? — f£,£dp= ex d , y d , z d ) commn 5 *>x d Rm d % m&m. 
mxm is ml* > =f * v mm r s (d+D p=(x d +iJd + i.Zd + i)©i 
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(d-DP=(X d _ 1 ,Y d _ 1 ,Z d _ 1 )CD^#(D5^X d = 1 ^Z d _ 1 ^ff»U JHftffi 

(ommzmmu^u 203 mmmm 203 ktifcMii©^ 

X d , Z d , X d + 1 , Z d + 1 , X d _ l5 r d _ lt x,£t>*yj; «9 r7-Y^i^>^ h^^gy 

M20 «^ x d> z d> x d + 1 , Z d + li X d _ 2 , Zd _ l3 fll 

10 4F*&*Lfc»^fcX d w , Y d w , Z d W ^tii^i-SM^7^^(D^S^Co^^-C^0J 

ffi««5aw2 03m vmmmmmic^xH^mmx^tit^ 

*> 9-fflF^dP=(x d , Y d . z d ) ©Mi© 5 t>x d X«z d , «»Jffi«T?«Sixfc*>'=r 
^yM*tR«J:©^(d + l)P=(X d + 1 ,Y d+1 ,Z d + 1 )©^©5^X d + 1 ^ 

is z d + 1% *f^M«T^^tbfc^^=f.^yM«Rftli_b©^(d-i)p=(x d _ 1 , 

Y d-i>Z d _ 1 )©M^©5*>X d _ 1 ^Z d _ 1> 7*7-M^l 0 3(CA^ 

*mit.v4^A,*s=. h^xmmpi&M±<D&p&ttmmmx*m: utk, y ) ^atj u 

^btLfe^^7^^(X d w ,Y d w ,Z d w )^tB^i-5 0 r^A^$tl^>=f 
20 ^lltnfti±©,feP077^1i^(x )y ) T% W^JKW^CXlY^zOW 

77 5 H*£dP© T~7 4 ism* * (x d , y d ) T% ftJftM Sr (X d , Y d , Z d ) Wi Jph, 
*-f „ * ^ =f * y £!4ft P3 ftfc±© £ (d-i) p© t- 7 -f ft- (x d _ x , y d _ 1 ) T% 

25 A(W)P077^g»*d d+liyd + 1 ,^ Jt«WI«r(X d + 1 ,y d + 1 , 
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T J iz J3X d _ 1 Z d + ! i?X ? T 2 K iZZ d _ ! X d + -l ^YlM*! $ tLT3o 

<9, Lyt^oTX d _ 1 Z d + 1 -Z d _ 1 X d + 1 ^f+^^t L 5 o ^-(D^m^l/^^ 
TjlM^tlSo XT^7°2 0 0 4i^V^TZ d Xx^'ffl^^ l/^^^T 2 
^^$ft5c 0 0 5 ^*5V^TX d -T 2 ^f+|?£3o rrt^^^ 

5 T 2 ^«Z d x^^^tlT*D^, Lfc^oTX d -xZ d ^f+Jf£tLSo ^(D^M^ 
Ui/X?T zlZfeftft&flZo ^TvZfZ 0 0 6 {^V^-CT 2 ^>2^^ff^$tLSo 
r r "C 1/ ^ ^ T 2 teX d -xZ d £ jo 9 . L fc & o T (X d -xZ d ) 2 j&Sft 

Tj XT 2 ^ff^^^§ 0 ^i-C^^^T 1 (^X d _ 1 Z d + 1 -Z d _ 1 X d + 1 ^ 
10 l/v?^^T 2 }d{i(X d -xZ d ) 2 ^^rtL^^$^T*5i9. L/c^oT(X d - 

xZ d ) 2 (X d _ 1 Z d + 1 -Z d _ 1 X d + 1 )^ff-#^^§ 0 ^©^^Y d w (c:|&|rt^n 
So *=r-yzf2 0 0 8 lC*3V^T4BXy^ti-3f $ttS c ^^^^ ^v 5 ^ ^ T 2 »C 
M^^So 0 0 9I^V^TT 2 XZ d + 1 ^f|-f $tl5 c -IT^ 

15 ^l/^^T 2 l'l§i^tl§ 0 ^T7^2 0 1 0tjoVNTT 2 XZ d _ 1 ^H-I 
$tL5o ' CT" ^ T 2 ^«4ByZ d + x ^tlT*5 !5 , L/c^oT 

4ByZ d+1 Z d _ 1 ^H-^$nSo ^(Ofa^U^^ZT 2 \^m^tlZ> 0 y 
7*2 0 1 1 iZteh^XT 2 XZ d -t>mW£tl& 0 -^'C^v ; ^^T 2 fctt4yZ d + 1 
Zd-j^^^tLTfeD, Lfc^oX4ByZ d + 1 Z d _ 1 Z d ^|4-^^f LSo ^<D,1§ 

20 m^ s ^v ; ^^T 2 {^tt$^So ^7^5/^2 0 1 2tJl*3V^T2XX d iSffHt$tL 
So ^w^U^^T 2 ti:tt4ByZ d + 1 Z d _ 1 Z d ^«BW$nT*3t», Lfc^oT 
4ByZ d + 1 Z d _ 1 Z d X d ^ff-3f $tbS 0 ^ * T x fcfttt £*L5 Q ^ 

4ByZ d + 1 Z d _ 1 Z d j&MfcJft£;h/T*3!K UfctfS 0 T4ByZ d + 1 Z d - l ^d^d 
25 £*L5o ^©^^Sl^^^Taf^^^tl'So ^T5'7°2 0 1 4m^TT 2 

Xs^ffHi^So -r.-ei/v ? ^^T 2 ^«4ByZ d + 1 Z d _ 1 Z d Z d 75S^^^T 
*3t), bfc^o-C4sByZ d + 1 Z d _ 1 Z d Z d ^|+^$^ l/?)o ^©JHfJftaS i^*^ 

Z d W ^ft$^§ 0 7fy/2 0 1 SK^Ta X Z d ^ffjf £ ti£, 0 ::tU 

^^Zd^msByZd + jZd.jZdZd^M^nT^^) N Lfc^ot 
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4asByZ d + 1 Z d _ 1 Z d Z d ^fH|[*tb5o * T 2 «C«Htt*n*. 

4ByZ d + 1 Z d _ lZd X d ^^^^ T2{c ^ 4asByZd + iZd _ iZdZd ^^^^ 
tt^TJS^ ^^oT4ByZ d + 1 Z d _ 1 Z d X d+ 4asByZ d + 1 Z d _ 1 Z d Z d ^f+ 

tt4ByZ d + 1 Z d » 1 Z d X d ^a fS ByZ d + 1 Z d _ 1 Z d Z d iS|Mrt$tLTVN5 0 l^** 
Y d W i^r^2 00 7m^(X d - x Z d ) 2 (X d _ 1 Z d + 1 -Z d . 1 X d+1 )^ 

Z d W l^7^2 0 1 4 ^^4sByZ d + 1 Z d _ 1 Z d Z d ^ A$ ^ 

±E?Iia^iWcx, y , x d . z d , x d + 1% z d + 1 , x d _ lN 

<x d , Y d w , z d w ){c4o{ts^^T^$ti5SSttOT©a^-efe5 0 
(d+l)P«^dP{c:^p^D^ Lfc^-efe y> , jft (d-i) Pf^dP^^MJI L7t.6 

*9***. ::t-x d =x d /z d , x d + 1 =x d + 1 /z d + 1 . x,.^^.,/ 

F; = (X d _,Z M -Z d _ x X d ^{X d -Z d xf -15 6 

X' d = 45yZ </+I Z„. 1 Z (/ X rf - ifc 5 7 
25 Z; = 4ByZ d+1 Z d . 1 Z d Z d -|5 8 

fci-*tor df r d , r d )=(x dJ x d) x d )*fca. yinnii^ 

jfcilM^A^ h7^S*P3ft*±©^t©»^B8«fco^Tf4, K.0keya, 
H. Kurumatani, K. Sakurai, Elliptic Curves with the Montgomery-Form and 
Their Cryptographic Applications, Public Key Cryptography, LNCS 1751 
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(2000) pp.238-257 fc:fBifi&£jh/r^5o ^jCiSi, ^$l^^£s, a t L 
Y d W = Y* d , X d W =X' d +aZ d W ^Z d W =sZ' d <&B80StfSfc5 o Lt 

r/ = (X„_,Z rf+I -Z rf _,X rf+1 )(X d -Z,*) 2 - ft 5 9 
5 = 42?j>Z </+1 Z rf _ I Z rf X d + o^Z^Z^Z^ -f 6 0 

Zj=4*2?yZ, +1 Z,_ 1 Z rf Z < , ...»6 1 

tftZo x d w , y d w , z d w «gi2 ot- j: «9^^^n§ 0 Lfc^ot, 

f7^MtiRft^^*5tt§*l-f^#(X d W , Y d W , Z d W )<t>m*± 

10 _hfB3NlHte^^$>:/2 0 0 1 „ 7fy7 e 2 00 2, 7^^2004, 

^2 007, 7x^^2 0 0 8, 77^/2 0 0 9, 77^2 0 10, XT y 
/2011, ^7^/2 0 12. 77y^2 0 13, ^X^^2 0 1 4^^^ 

15 ^cDff^4«, ^TRRfr±©aiJ|E©ffHIEJfc, 2^#(7Jff^» ( ^J;b-<Ti:b^/^$V^ 

20 S = 0. 8M^«i-^^^I^7C(Df+^4(il 2. 8 MT'fe <9 , if55*;*# 7 - 
^f+JI © 5+^4 £ Jfc^T 3 jWZL/h £ V \, U fl* o T SMstt KUffiSt £«5e "€ 

±&&m&ktbte<xb. ±mf+M^£<9ii.z_t,ti±x A w ^ Y d w , 

Z d W Ojit^fi-^-e^tbtfX d W . Y d W . Z d W (Dmm7hX^^ Q I7-faL,U 

5i-x d w . Y d w . z d w ^it^5itRb, ^<Dmm&xztim d w ^ Y d w v z d w 
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^^^HftdXrJfy^ai^^ h7^S«Rft»Jb©jfeP^6 % X d , Z d , 

vi74=A^~h7xwtonmm±<DAu>fr^ x d , z d , x d+1 , z d + 1) 

£*l-5 0 f^, i*^^^-f^tf»f|52 0 2fc*5V^TJlfB^ilR(DT^^y X^^^ 

io ^^<xt>, **7-mRTf7j^is^h7XMttnmm±<D&pfrir > ^ x d , 

Z d , X d + 1 , Z d + 1 , X d _ lf Z d _ 1 %tHti-i-z ) TsU=i* V XA-cfc!) -i-OiSbitl? 

7— ffiFff-JHfP 1 O 3 iZ&if zmW&xM 2 0 3 ©j^&Tcic&gfcaf-Jfs 
til 2M+S-efc«^ mf«^i/7-^ff^2 0 2(D^^^^-fSff^ 
15 ^^ff^»© ( 9 . 2k+l) M<Hcit^Tte£;^/h£^ 0 Lfc^o-C, 
*#7-fflF»jrapi 0 SO^^^HSFW-lt^^W-JlE*^ i«^X/7-^ff 
*»0**^*7H»fW^S*tf»*i«^ra<9f-t?S, So S = 0. SMtiK 
fe-fZk. COW-jtMttdsjsJ;^ (9. 2k + 13. 8) M^m§^^ 
^fi^*7-ttd^l6 0lfyh (k=160) T?fc*tff, ZL<DX*? 
20 -f§ff»fC^M*ff^i«*3*5j;^l 4 8 6Mtft5. *f Rift^ Lt-7^x;i, 

^ISi LtfflTJfSi^OTt ^5fF*lf^fe if i 6 0 - 
;lx t Jfc^Tj&K £ & 5 ff^»«ft'ij^ $ fax V n § 0 
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^ >mmxm z ^ v mnw&m±<DM. (d+D p= ( x d + x , y d + x ) ©m 
m<d 5 *>x d + 1 , 77^ ^marr* >- =r ^ y Mttra ftj»±©/s c d _ 2 ) p 

= (x d _ 1 ,y d _ 1 )OJEfe|R©5 ^x d _! Srff3f U 77^ ^mmX^&tlfaXJj 

£jnin*e>=** ymttmmm±<Dj&p=u,y)kmz*<Dffin&mmmjcn2 o 3 

10 jaiaitt7n«fU2 O 3tt-^^.?>tLfcJffi»©ttx d , x d + lN x d _ ls xSt>* 

{#£dP= (x d W , y d W ) ©Hy d W ©«5n SrfTfc 5 , -ffiFff-HEf P 10 3tt!7 

^7J^-ff^(x d W ,y d W )^ff»^i LTttJ^7i-S 0 
15 M2 ltCtt). M^x. y. x d% x d + 1 . x d _ 1 ^^_hntcm^, 

x d w ^ yd W ^ffi^i~^ffi»a^^^Sicov^T^-t-2) 0 

mm&TtM 203 -era. ^^^7 y mtm mmiz&^xT -7 ^ >mmx*m&ti 

tc7ft^ — fflF/ftdP= (x d , y d ) ©If© 5 ^>x d % 77^ ylgt'i £ tbfc^E- > =f 
P< yS«Rftj»JbO^(d+l)P=(x d + 1 ,y d+1 )©Jffi«©5"fex d + 1% 77^ >- 

20 mmxm£fttc*?^=t* ymRiti±©^(<H)p=(x d _ 1) y d _ 1 )©jifo 

P£r T 7 ^ ^J&It^l bfc (x, y) & At) U .gAT©3MreT 7 ^ yjiffc*3V 
£ft x. fc tl,7c 7 ft y -feM. (x d w , y d w ) & ffiTJ f 5 o 

7-7S'7 0 2 1 0 l(^V^x d -x^K-I$^ ^^T^^ft^HSo * 
25 ^3/^*2 1 0 2Jdd3l/>TT 1 ©2^-r^t>*>(x d -x) 2 mm^tl, 

T tl& 0 7Ty7 p 2 1 0 3 fC&V^Txd-! ~x d+ iiSfUP^tLs 

^^T 2 ^jjft^nSo ^f?'7 0 2 1 0 ^jo^tTi XT 2 ^fff $tl§ 6 £ 

r -e ? t ! ictt (x d -x) 2 as ^ T 2 wax d _ j -x d + 1 is-tn-entt- 
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-"^^^ 2 fctt4By#te*fi3;h,T:fe D , UfcaSoTl/4ByastW*tb5. 
*0»**^^^T 2 |C#|AStL*. XTy?2 1 07l^ Wl XT 2 ^ 

^mHm**ti?ftfemtsfix*!> y> x ltc^o t (x d _ x) 2 (x d _ i _ 

(x d _ j -x d + i)/4By^#ft$nr*5 9 , Lfc^oT (x d -x) 2 (x d _ 1 - 

10 x d + 1 )/4sBy*ff^^^5 0 *nmmifiu*?x*jVK*misto 9 

M*l£*vrv><5 0 ^^^y d W ^^5,^ 2 1 0 8(C*5^T(x d -x) 2 (x d _ 1 
-x d + 1 )/4sBy*^^ *<D&WmtSin*\,W7*. ^®I^*nTV>5 6 

-bfB#ji(ifc J; 9*;*/ 7 -ffiF^©yjaHiy d 3^ «^ T Oil 
^(d+l)Ptt/SSdPR:AP«rlp||L*iA-C«,« 0 ^(d-DPtt^dP^^^P^M^Ufc^ 

£*©»J&Hfffco^Ttt. K.0keya, H. Kurumatani, K. Sakurai, Elliptic 
Curves with the Montgomery-Form and Their Cryptographic Applications, 
25 Public Key Cryptography, LNCS 1751 (2000) pp. 238-257 ^fesft^TV^ 
* nfci6 ^ ^^HaiLT, y d W = 8-^,^/= s - 1 x d + 

= (x rf _, -x„ +1 )O rf -xf/AsBy •• • Hfc 6 2 



x, =^ rf +a -f 63 
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x d w , y d w te!H2 lK£V-$Z-1otlZ>o Uc^oT, T7^>mW 

(x d w » y d w ) <om.\*.£x&7t is*ix^2>z.b\z.t£%> 0 

±f2#JllItt^^5/7°2 1 0 4, 77^/2 10 5, ^75/^2107, *T V 
^2 10 8RTfXTy7'2 1 0 9 iddoV^T^TRB^Jb©^©^ ftSr^S £ 
5 ^^y^2 1 0 2jZl*5V^*l8ft:Ji©2*||E(Offf|f*^ie:«t-t-5o 

10 Si:. _tfB^JiS«5M+S+ I ©tHHfc«r&K£-f-5o ^^141*3*^*7— ffiFih 
fix 1B5^*7— ^fHf©^3f4ti^i3«fc-5-l 5 0 OMiitjLKffcbtLSo S = 

o. 8mmi =4 0Mbfiimi-z>kmmu7G<Dnn-&te4 5... a; 
«t-#5 0 ^ ©^j*— ht£*> wiwm^m±-r 5 0 */c s 

x d , x d + 1 , x d = 1 ^Hi^"^Sfll55i^^^'-'f&fhSL§P©*a.St^ov>T|ft^ 
S55i^ # 7 -f£fff-Jfg|$ 2 0 2 T*J3\ ^*7 — ffiFtHtlFR 10 3 iCA^J $ ttfc 17 ^ 
R AifeK: >T T 7 -Y >M^T^ $ tt7t 7*7 — f£,£dP= (x d , y d ) © 5 ^>x d , T 

■7 ^ >mwx-m £ tifc^e > y m*h r tt*Lh©j& (d+i) p= cx d + 1 , y d + x ) © 5 

(x d _ 1 ,y d _ 1 )(D5t)x d _ 1 ?rtil7jt§„ 7/2 4 1 6 i L"C\ ^^brl 
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fc±0**Jxfc*te**r*. £©**fc&fc*>Tj^±r5. W240 
/fe2PSrfH([-t-5 0 ^ZT*&Pimm®MlC3S^XU, y,l)t LX*U 

X0 e ^2PfiltM*T*$tL-CVNS o 7f^2 404iU,«ftliW 

10 ^2 4 14-ff<. -tUim^r : y7»2 4 0 5-fT< o 7f^2 4 

• BOlfjr h©HD9S0T?a,Sd.i-c J> 5^**|fei-5 o o-Cfc 

*T< 0 ^jy^2 4 0 7iLT, ^ffiWfci ^^tLTc^OMCmP, (m+l)P)^ 
15 ^^mP^^( m+ l)P^ 0 »mP + (m + l)P^^VN, jfr (2m + l)P§rf+^-f^ o 
^2408-fj< o »mP + (m+l)P^ y S«R 

**fc*5tt«in||[^:Mv^fH|[*n5 0 ^^24 0 8 4LT, 
K:.k?>*£*lfcA©»<*>, 0^1)P)^e,^mP©2»#2(mP)*fT*V\ ^2mP^f+ 
Wr,7"2 4 0 9^< 0 ^f, 2flf*2(mP)fcJU ^i/y 

(2m + 1 ) <DM C2mP, ( 2m+ 1 ) P) t LT, fop, ( m+ 1 ) P ) ©ft^ Q 

§o Wt^2404^ o ::t % ^ ^( 2m+ l)P, *rf*0tt 

mP + ( m+ i)p{^ y ^*n**©l»aWK:**J5ip|f^:Mv4fW 

W24 1ULT, «»**fcJ:9*^*:^oa(inP.<^l)P) 
^fe^(m + l)P^2^2((n 1+ l)P)^^V\ ,&(2m + 2)P£f+Jfi-5 0 ^©^^ 
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&m.mz.tetfz> 2f^(D^^^v^Tf^^$n-5o ^yztz 412 1 it, ^ 

^?'^2 4 1 0 X*?k#>ti£L (2m+ l)?t^Ty^2 4 1 1 X^ibtcM. (2m+2) P&M 
(D|a((2m+l)P, (2m+2)P) t UT, A^IKrnP, (m+1) ?(D\Xt> kUfem~tZ> 0 ^(D 
5 f77j/7"2 4 0 4 — M 5o ::t% ,6 (2ra+ 1 ) P, (2m+2) P, AmPR If A 
(m+l)P}^-CltBffi^l{c:*5^/^T*$t^TV^§ 0 ^x^7°2 41 4 t It, ttj^M 
tf^St£;ft7h,&<D|E(mP, (m+ 1 )P) ^fe, ^(m-l)P©ltf^Ml^*5^^XM# 

^2 4 1 5-4r< 0 ^f>7/2 4 1 5 t UT, ^^T?*$tLfc^mP=(X m , 
10 Y m , Z m ) J: «9X m .^U?Z m ^-^^nx d ^O?Z d £ U MBMmxm ZfrfrM (m+1) P 
= (x m+1 ,y m+1 ,z m+1 ) J: ^x m+1 ^tj«z m+1 ^^^tLX d + 1 5i^z d + 1 £ 

x d-i> Z d + 1 , X d , Z d , X d + 1 , Z d + 1 £«9 N f24, t25, t26^L 
15 .tx d _i, x d) x d + 1 ?r^fe§ 0 -^(Df^^^ ix^°2 4 1 3^fr< 0 ^Ty^2 
4 1 3 t Lt, x d _ 1 , x d , x d+1 ^{+J^-r^, 0 _bl5^Mt- cfc t> . mt7i;7 

^^7x^/2 4 1 4m^T(m-l)P^fe5it, |[13, ^ 1 4 CO^: 
5£k:J: VlfrlsbXh cfcl/^U m#^tfc-e&;fl,«\ ((m-l)/2)P©fi^Ti/^2 4 1 
20 2(D^^IJ{C^L.T^^. -^(D^b^^^V yM*fRM^2{£3|(D^5£ 
«tt» % (nr-l)PtrJfc«rC 1 t>.J:V\, 

25 ^S©H-ff|+ N 3M+2St*fo5 0 7HI© I #1 (D fs/ b©f ^ 0 ffe 
tbtf, ^f^7*2 4 0 7{d^V^P#Off#*, ^ry^2 4 0 8(C*5VNT2ff 
JI®»|-3fcfc&Si&55i:*<5o t^t)t> 6M+ 4 S ©tflf ^^gt /j:5 o — 

{&<D I#g©t> 1 Xfotltt, ^^5/^°2 4 1 O^^TAn^CDi+Jf:!:, 

^'^241 1 lZte\,^X2m»(DnWm><&WkteZ> 0 f/^6M+4S© 
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tt**#jfiW?ib* 0 V^iVL©»*te*V^Tt 6M+4 s©ff^»^^-e fe<5i 
^ /2404 ^ ^^2405, ^7^24 0 6, 7/^2407, 
^7^24 08,77^240 9Mli^^2404, .7^7240 
5, ^7^/2406, ^7^24 10, W24 1 1, 7^/2 4 1 

37*2 4 0 2fO2ft©tfi, W2 4 1 4f©Vl)P©|H^ f rrf 
fiM^7^2 4 1 5 ^^^^^«-©^^ff»*^it(CAn^^, 
(6M+4S) k + HM+I^ o £ i^k 

10 ^OMfitfiASItfen*©^ ^©tWitt**** (9. 2k + 5l) 
Mi45 « «*tf**9HKd#16 0ir*h (k = 160) x*&tu^ 
«©7^yXAOSH[ltt^^l 5 2 3Mt^ 0 **^ffid©lf> h 
*»fc9 0tW*i:LTtt*J«9. 2Mi45. A.Miyaji, T. Ono, H.Cohen, 
Efficient elliptic curve exponentiation using mixed coordinates, 

15 Advances in Cryptology Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) 

pp.5i-65 & * vjxwmnmmz&^x, *4>vvm*m^ 

^*7-«tt«*»iUTK«tS*LT^* 0 £©»*fc::isvvcHU *#:?H»© 
20 -©«*©WJ|[*^ S i: ftSo fl*!***:?-*^ 1 6 0 b (k = 1 r 

*£*M^#;te>ftfc;**?H*A (x d ,y d ) SrfWbWAfSfeO-C* 
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y §y*f R*ll^*DV^T^^T^$^c^^7^-^dP= (x d , 
5 Y d , Z d ) <Dffi#(D ? t>X d 2£t>*Z d , ttM^-e* $ ntc^r > dt* ]) mm R ft/^-b 
c?X&(d+l)P=(X d + lf Y d + !,Z d + 1 ) <Dmm<D0ibl d + 1 RXJZ d + 1 ^mW-\^, 

~r~7 ^ ^mmxm. tstut ax £ tut*^ =t* y M*t r ft$Lh©j&p= ( x , y ) ^ * 
mx d , z d> x d + 1 , z d + ls x^t^y <t 9^^^ vm^Fimm^m^xT^ 

10 >ffi^T^ $ tbfc ^ # ^ — fflF^CdP= (x d , y d ) (Dmm x d RZFy d (D'&yb Srfy & 

&fcEi3 4K1J: *K j0E^x,y,X d ,Z d ,X d + 1 ,Z d + 1 ^x.btL*:*&^Cx d ,y d 
15 M#*£5cSS 2 0 3 -CW:. ^E-^V JJ M*f Rft*lti:*5VN-CK*Jffi«-C**nfc^ 

# 7 — faF^cdP= (x d , y d , z d ) <omm ?t,x d %.m d> mwmmxm £ n*:* >- =r 

^ yS«P3ftj|fci:©^(d+l)P=(X d + 1 ,Y d + 1 ,Z d + 1 )0M*0 5^X d + 1 2St^ 

20 Jffi**#^e>*L*:^*9— fflF^C(x d ,y d )Srai^i-5o ^r-e^SM^yrf 
^ yittniI±©^P©77^Ii^(x,y)T\ St^WSrCXLYi.Z!)^ 
^fiitto A^^tit^^7- fS^di: UT^>=iV y SM*R# attest 5 ^ 

# 7 HB^dPO 77^ yll £ (x d , y d ) T% £r(X d ,Y d ,Z d ) T^tl^ti 

m-f 0 ^>=i* yS«fR*ISLh©jfe(d+i)POT7-f VjBS*«r(x d+1 ,y d + 1 )-c, 
25 Jttf&M«£ (X d + 1 ,Y d + 1> Z d + 1 ) -C-€rtt^iT4fti- o 

4 0 1 ^joVNTxXZ d ^ff^^tb, ^^^TjtM^^ ^ 
Ty?3 4 0 2 idjoV^-CX d +T x ^Sfh^L^fLSo - - "C W ^ * T 1 {£«xZ d *S 

*&$5$*vc*5<9, Ufc^oTxZ d +x d ^f}-Jf£;ft,5o ^©W^^T 2 |: 
♦S^ft^iXSo 4 0 3 ^:&l^TX d -T 1 ;$Sf+^£;ft s 
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^^^T 3 M$tl5 o * 7^37° 3 4 0 ^C^Tl^^TgO^JiaSfl- 
ZtlXiSV), ^^oTX d+1 (X d - xZd ) 2 ^tf^ $tL5o ^©g^^^^ 
T 3 »i:*Mft*jx5„ ^7 i S'^3 4 0 6R:»V^2AXZ d #fHiS^ l/^^ T] 
tc*^$tt So 7ry^3 4 0 7R:*i^TT 2 +T 1 #fj-|[$tl5 o 

10 a*oTxZ d +X d +2AZ d ^aS;h, 5o *®«Ml* l^** T 2 fcUMftSftS. -X 
T^3 4 0 8i^VTxXX d ^I^ ^**T 4 fc*H|ft&h, 6o 
^340 9m^tT 4+ Z d ^I^ 5o -^^^T^WtxX^KMft 

£*l§ 0 ^T^34ioi:fet^T 2 xT 4 ^i^ o 

15 T 2 Kl»4xZ d+ X d i2AZ d aS * T 4 K:ttxX d +Z d ^tL^tLftjttStLTTfc 5 % 

Lfc^oT(xZ d+ X d+ 2AZ d )(xX d+ Z d )^tf»^tL So W^^T 2 tel 

*tt**L3 0 ^T^34 11t^TT 1 XZ d «^§ o rif^ 
^T lK :H:2AZ d *»«*nT*50. l^oT2AZ d 2 ^W£*l<5 0 
^^^T!!^^^ ^^34 1 2^^TT 2 -T 1 ^ff#$^ D 
20 --^^^^T 2 tett(xZ d +X d 4^ d )( x x d+ z d )^ - C ^ u ^^ Tifctt 

2Az d 2 as*n-en»»**LTS8 5. bfc^ oT(xZd+Xd+2AZd) ( xXd+Zd) - 

2AZ d 2 ^ tf ^^ ;h/§o ^©|S*iSu^^ T2lcttttSih/5o 7f ^3 4l3 
»^T 2 XZ d + 1 #fH[^ 5o --T?^^^T 2 |Ctt(xZ d+ X d + 
2AZ d )(xX d+ Z d )-2AZ d 2 «^^nT*5^ Lfc#oTZ d + j ((xZ d +X d + 
25 2AZ d )(xX d+ Z d )-2AZ d 2 )^ fi -^^ tl5o * T 2 fcJMftSftS. 

^T^3 4 14m^T 2 -T 3 «^§ 0 ^T^v^T 2 (US 
Z d+ i((xZ d+ X d+ 2AZ d )(xX d+ Z d )-2AZ d 2 )^^^^ T3}cf±Xd+i(Xd _ xZd) 

2 *^n**$*LT*55. b^^oTZ d + 1 (( xZd+ X d+ 2AZ d ) (xX d+ Z d )- 
2AZ d )-X d + 1 (X d -xZ d ) 2 *mM£HZ> 0 *<Dt&m#ls&x*T ziztetoZfr 
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So ^7 7^3 4 15 (cl*5V^T2BXy^ff^^^ s ^^T^C^^S, 
^7^5/^3 4 1 6 Kl£5V^TT ! XZ d ^ft-#$n5o C^tl/^^T 1 (ei^2By 
frfemZtlX&y > Ufc^oT2ByZ d ^tf#^ix6 0 -^©ii^l/v 1 ^ ^ T x 
*&$3£;ft5o ^^^^3 4 1 T^&^TT! XZ d + 1 ^f-f-^§tb^ 0 r^t^v? 
5 ^^Tj^^ByZd^^^^t-c^^, L-fc^ 0 x2ByZ d Z d + 1 ^ff^$^ / ^ o 
^(DWM^l^^^^T 1 \Hfam^?ChZ> 0 XTv7°3 4 1 SicjoV^TT-L XZ d ^ff 

2ByZ d Z d + 1 Z d ^frt-|f£;h,3o ^(D^M:tfUi/X?T 3 icmfo£hZ> 0 *T 

341 9(c:&v^w:;;*^T3<Di£5£^fflS£;ft&o rr-ev^^T 3 iutt 

10 2ByZ d Z d + 1 Z d ^^^^ LT ^ {9 ^ bfc^oTl/2ByZ d Z d+1 Z d ^fi-^$^ o 
^<DWWz1)>Ui?^?T 3 \7LWflhtSfhZ> 0 4 2 0{C^oVNTT 2 XT 3 ^ 

ftW-Ztl&o r r-ei/v ? ^^T 2 ie:«Z d+1 ((xZ d +X d +2AZ d ) (xX d +Z d )- 
2AZ d 2 ) -X d + 1 (X d -xZ d ) 2 tf* W i?X 9 T 3 it l/2ByZ d Z d+1 Z d #^ tb^tt*& 
*A^tbT*3«J s Lt#oT(Z d+1 ((xZ d +X d +2AZ d ) (xX d +Z d ) -2AZ d 2 )-X d + 1 

15 (X d -xZ d ) 2 }/2ByZ d Z d+ x Z d ^ff#^tt-5 0 *y d }il>|£^£ 

H5„ ^xy^3 4 2 1 tCjSV^Ti XX d 3&Sff-j([$jx5 0 irtl/^^Tit 
tt2ByZ d Z d + 1 iSt&^^tL-C*3t). Lfc^oT2ByZ d Z d + !X d dSfMf $tbS B 
M^^^TjM^^, ^7^/34 2 2{ei^oV^TT 1 XT 3 ^ 
tUf ^ fL^o ^ "C l/v 5 ^. * T 2 \U*2ByZ d Z d + 1 X d ^ ^ T 3 Kim/ 

20 2ByZ d Z d + 1 Z d dS-ttt^tL*j(ftStfC*5D, LfctfSo T2ByZ d Z d + a X d /2ByZ d 
Z d + iZ d (=X d /Z d )tfSfh3l£;h,5 0 ^©^^x d ^^$tL§ 0 y^tt^s, 
^3 4 2 0(C*5V>T{Z d + 1 ((xZ d +X d +2AZ d ) (xX d +Z d ) -2AZ d 2 )-X d + 1 (X d - 
xZ d ) 2 }/2By Z d Z d+1 Z d 3dS|Mfl$*L % ^©^JWjWfcfeh^^O'T?, -^(Tjfjt 

25 ±IE#JlR(Cj:«9ffi^1t5cl?P2 0 3—-^^.btLfcx x y N x d% Z d> X d + 1% 

z d + 1 ^^>-^ysiiR ftUfcfett s ^ # 7 — &&<dt ^ ^ xffi* ( x d , 
y d )fo&ttzm&&x&iK&tiz>m&te£kT<DmY) x&z> 0 &(d+DPitM 
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X'hZ<DX\ By d 2 =x d 3 -fAx d 2 + x d ^tKBy 2 =x 3 + Ax 2 + x^7h-r o »6*CftVU 

By d 2 Rmy 2 ^m^i^ $:&mm~f%k^ 

y d = {(x d x+l)(x d +x+2A)-2A-(x d -x) 2 x d + 1 }/(2By) -#6 4 
m ° "~ ex d=X d /Z d , x d + 1 =X d + 1 /Z d + 1 -?fe^ ^©ttSrftA-r 

y d = {Za + 1 ((X d x + Z d )(X d+ xZ d+ 2AZ d )-2Azi)-(X d -xZ d )% + 1 }/(2ByZ d Z d + 1 Z d ) 

—&6 5 

x d =x d /z d -efe 5 ^\ &5cm»<Dm&&m § y d t s^h-s ^ 

10 X d = (2ByZ d Z d + 1 X d )/(2ByZ d Z d + 1 Z d ) .-.* 6 6 

£fc-5o x d , y d ttBT3 4(D«LS(C < tt)-^X.e J tLTVNS 0 LfejSoT, 

lB¥HStt^ 5 r5'3 4 0 1, ^3 4 0 5, ^/3406, 
^3 4 0 8, 4 W3411, ^3413, x T y 

15 ^3 4 15, W34 16, ^/3417, 4 ^ y 

^342 0, ^f^3 42 lAtJt^jyra 4 2 2^V^W±©^ (D 

Sfc, ^t^3 4 0 4(^^rW±©2tf©ffI 

4 **® it5 - ^^3 4 1 9 K^^x^fm±<Dmjhmm<Dfmm 

Tbmummmz i _hfs^jns«i 4 m+s+i ©u-j*******-*,, 

d#16 ° * v hx&ti^ *m**?-im*<D9mmK*3*z* isoom 

25 mkMMt>btlZ 0 S = 0. 8M. I-4 0Mifigt5tl Mt5E(DM[4tl 

^ o x$h*m \zmrn *m.jt x # x v ^ § ^ t ^ $ ^f Co 
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' (ffd&t^V^V yS«R#»_b©j&Pa>^ X d ,Z d ,X d + 1 , 

^^^ySHRl61±©»b, X d , Z d , X d + 1 , Z d + 1 ^t57^ 
10 £|52 0 2 id*3V^-CJblBT^^y XA2r/BV^< Tfc. 7— ffidS.O^^r? 

y®»RftaSLL©j&pa>& % x d , z d , x d+1 , z d + 1 ^t57;^yxA-e 
xx^—mnm o 3in*5tj-3rai«7ng&2 o 3 (Dmmm^^^fmwA 

ttl 4M+S+ I , £ftf4ift£;*;&7 — 0 2(D^jg^^7^— 

15 ff-^di&^&ff-SftO (9. 2k-4. 6) MiKlifc^TttSa^ZL/hSv^ Ufc 

7—igf\-n&<Dmmxz7—mm^&mfmwAbmgmmx»fo& 0 i = 4 o 

M, S = 0. 8M^I^t5ir, Z<DfYM.mt£3S33£*: (9. 2k + 5 0) Mi 
Ml)5-^#t#5 0 Mz-ftXjJ?— -fiSd^ i 6 0 If y h (k=16 0) 
20 jfttf. i©^^7^ff#^^M*ff#ft«l 5 2 2Mi45„ fllHfttt£ UT 

T^-OM^i: bT{±S7J-t-^m^}e:^St^Sff^*«*5*5J:^l 6 4 OMTfe 
25 ^15 <£>H«!li3: N ;* # 7 — fiSFff3t*FR 10 3i^*7 — Ittd&tPE- Isdtjt ]) gy 

# 7 -hhwrt*^ > y sftit r &m±<D&p& ^fj? — fl?&9m 103 in A7j-r 
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=o» y M+t r tt^icifev ^x&mmmxm ? -^ d p= a d , Y d , z d ) © 

= ( X d+ 1 ,Y d + 1 ,Z d + 1 )o^^5^x d + 1 ^Z d + 1 ^fh#L, 77^1 
ffittttTctt 2 0 3 fc4MLS. jE&IKfc7G«B 2 0 3 fit** 6»*bfcjfi*©« d , Z d % 

10 V d , Z d ) tVX ft Jj~fZ> 0 

* KB86fcJ: ^ YX d , Z d . X d + 1 . Z d + 1 #*;t 6 *Lfc»#fc: 

# ^ -i^dp= (x d , y d , z d > ©m#i© 5 ibx d xo«z d , tommm-ntt s**** > 
15 =r* y mmn &m±<D& ( d+ i) P = (Xd + 1 , Yd + 1 , Zd + , ) ©«*© 5 %Xd + 1 R 

m d + 1 ^ ^*5H8f«*»l 0 3fcA**iifc^=f^ !H*Bft|Ll:Oj«P 
SrT 7 ^ Lfc (x, y) ^rA7J U MTiD^MXto&mm&^X^tem. 

htitcx* 9HBF/SCX df Y d , z d ) srw^rs. r - r~A* *nfc*^=r 
UISHftR *«_h©^P© 77^ £ (x, y) t% &(X 1 ,Y 1 ,Z 1 )X*: 

20 n^*-^ 0 A^*tb^*9-tt^dtbT*V=f^ys*»Rl&i»»c*5ttS^ 

# 7 H»^dp© 7"7 ^ i,mm * (x d , y d ) T % jhom * ex d . y d , z d ) -e* veto 
m-r. *eis** ymRft^( ( Hi)P©77^iii( Id+1 , yd+i) ^ 
*f§M« sr(x d +i.Y d+ . 1 ,z d + 1 ) 

25 7^3 5 0 2^WX d+Tl ^I^ o — T'W^T^ttxZ^ 
U-^^T 8 lC»tt$^5 0 ^^2/^3 5 0 4^4oVNTlx^^T 3 ©2^^tf- 
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W-ZftZo rrt^7^T 3 |: ttxZ d -X d £ *LT *3 !K Ufc^ oT (x d - 

k:&^TT 3 XX d+1 #if+|r£;tx3 0 - ^T?^v?^^T 3 ^{i(X d -xZ d ) 2 
$tL-C*5«9, Lfctf*oTX d + 1 (X d -xZ d ) 2 35fH¥&ft5 e ^©jjgJUasu^jx^ 
5 T 3 JC^$^5 0 ^-7"^^°3 5 0 6{ei:ioV^2AXZ d ;^f|-^£;*'U l/^^Tj 
fcte^iT/So 5 0 7}Cfe^tT 2 + T 1 ^ftI$tl5o m-ew>? 

^ ^ T 2 K: fixZ d +X d & 1/ J? ^ ^ T ! «2AZ d ^ ^ jjx^Mfrjlft $ tlT £> <9 > bfc 
^o-rxZ d +X d +2AZ d ^tf-^$^§. o -?:<D|S^:^l/v ? ^^T 2 ^mift$fL5o * 
^^3 5 O 8tC:fe^-CxXX d ;e>$f-}-|!L£;ru ^ T 4 fctejjft £;fL3 0 ^^5/ 

10 37*3 5 0 9^*5V^-CT 4 +Z d ^ft^$^§ o ~ ~ T~ l^*^ T 4 tCl^xX d ^M>3 
$tLT*3!9, b^i)So-rxX d +Z d ^ft^^^5 o ^t©^^si/>?^^t 4 (c:^|^ 
£H3 0 ^TS/7°3 5 1 0m^TT 2 XT 4 ^tl-I$^5 o rrt*^^ 
T 2 laixZ d +X d +2AZ d #S ^^T 4 t texX d +Z d flS^rft^Mfrtfj £ tlX& <0 . 
L fcrfS o f (xZ d +X d +2AZ d ) (xX d +Z d ) m\W- $ll5 0 ^Og*^* l/^^T 2 |C 

15 M^tLS„ 5 1 1 fc:j3l>TT ! XZ d iSff3f $tb5„ r^t^X 

- ^ix^^TjiM^tl^o XTy73 5 1 2{^*5V^TT 2 -T 1 ^ff-3f$tLSo 
rrt^^^T 2 ttt (xZ d +X d +2AZ d ) (xX d +Z d )^rrtl/^^T j 
2AZ d 2 ^^r^tL*&7f;rt$tLX*D'P, bfc^oT(xZ d +X d +2AZ d ) (xX d +Z d )- 
20 2AZ d 2/$Sff^£tL5 0 -?r<Oj|S*3^U^^T2fc«H(ft$tL5 0 7f5'7'3513 
fCjoV^TT 2 XZ d + 1 fimW£frlZ> 0 ^Ctl/> ! 7^T 2 t|j:(xZ d +X d + 
2AZ d ) (xX d +Z d )-2AZ d 2 ^^$tLT*5 0, bfc^oTZ d+1 ((xZ d +X d + 
2AZ d ) (xX d +Z d )-2AZ d 2 )^D-f$^o ^(D^mu^^fT 2 \ZLlfem&3riZ> 0 

25 Z d + 1 ((xZ d +X d +2AZ d ) (xX d +Z d )-2AZ d Z ) &Ui?*? T 3 te&X d + t (X d ~ 
xZ d ) 2 &^:tl^:tlW$l&fLTteV). Lfc^oTZ d + 1 ((xZ d +X d +2AZ d ) (xX d + 
Z d )-2AZ d 2 )-X d + 1 (X d -xZ d ) 2 tm^£frZ> 0 ^<Dfa^Ui/*?X d \z.-famtS 
frl&o 5 1 5lZl*5VNT2BXyiStm[$n. ^^T^Cfei^^ 

^^351 61C*3V>-CT 1 XZ d ^tHI$ix5 0 n^^W^^Tx^^By 
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feWtStlZ, 5 1 7 f^^TT j XZ d + , rrfI^ So 

^ T a te2ByZ d $ tLT ** 5 N L o T2ByZ d Z d + 1 *5fH|[$nS. 

^«^l/^^ Tl M^tl5 o ^^^^3 5 1 Sm^TjXXd^ 
5 I^5o --^^^^T 1 ICtt2ByZ d Z d + 1 aS*|rt$tL T j3i ?% bfcs^oT 
2ByZ d Z d + 1 X d ^ff^^tL5 0 ^©Wi,^^ Xdi:ia ^ 5o 
SSlQfciJW^Z^IHt^. -^T^^^ Tl ^tt2ByZ d Z d + 1 
#**£*,T*!K Lfc*or2ByZ d Z d + 1 Z d3 &SfH|[Sn«. l^?* 
^Z d JC»^$tL5„ XjlCtt^^sy^a 5 1 8fCfcVvT2ByZ d Z d+1 X d as«HW£ 

37° 3 5 1 4^V^Z d + 1 ((xZ d+ X d+ 2AZ d )(xX d+ Z d )-2AZ d 2 )-X d+1 (X d - 
J»«fc y, X d , Z d , x d+1 , Z d + 1 *fe W ~*i 

IfflflftiiO^f^O^ By d 2 =x d 3 +Ax d 2 +x d ^y 2 =x 3 + Ax 2 +x ^c 
-To *6fcftAU By d 2 ^U?By 2 ^M*L, S^lSt -5 <t , *6 4«r#5 0 

--t-x d =x d /z d , x d + 1 =x d + 1 /z d + 1 -efe«?. Z(Dm%ttA~f~z>z.tte 

20 J:9#*ffi«©tt-i«|fcf5i, *6 5Sr#6„ x d =X d /Z d T^§^ ^ 

Y d =Z d + 1 [(X d +xZ d +2AZ d )(X d x+Z d )-2Azg]-(X d -xZ d ) 2 X d + 1 -fc6 7 
t U X d ^U?Z d ^^tim 
25 2ByZ d Z d + 1 X d -§6 8 

2ByZ d Z d + 1 X d ~&6 9 

-bfe^Hi«^^^^3 5 0 1 , ^7^3 505, 7^35 06, Xf.; 
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^3 5 0 8, 7*=r y7°3 5 1 0, 7f 5-/3 511, ^7° 3 5 13, 7T v 
/3515, 7*7 -y 3 5 16, ^x^7°3 5 17, ^7" y X 3 5 1 8S.t/^^ 

^rS^-fS^, _bf2^J!R« 1 2M+ S ©fh3IS:£j&^£ 1~5 0 -*Lfiii«5i;*;*7 7 
— ffiFtf-jfO^-JltAtJfc^rttS^^/h^V^ fji«7^7-fid^l 6 0 fc> h 

10 S = 0. 8MttetS ^M^7n©ff#i«l. 2. i^jS^^^ — 

ft, Jife^Jl(I££ fe&< T^. JifBfi-^^i^-^^^tLfcXd, Y d , Z d (DiW. 
tm%X^tlt£X d ^ Y d , Z d (D«S^-e^ So 3=^ x ^ y d ^_h|Bf|-^^ 
15 J: V-!3-7LibtlZ>{&&mZ)£?iCX d> Y d , Z d Ofjt^riil$RL, -^(Dje^f+»-e# 
{^X d , Y d , Z d ^f7LT*tS„ •^^(Dil'g-jiijo^Tte:— ^^MTci-^Mi: & 

^T5/7°3 5 0 6Tbmfc7Ty7°3 5 15 5f^tf>f+»* 
20 7*7- ffidJtO^ri^V UMttRtt^-bO^P^b, X d , Z d , X d+1 , 

^>z3*vmmnM%±(D&?frh, x d , z d , x d+1 , z d + 1 ^aj^t57^d- 

25 yXi^UT, »&5 7;^"!j XJ»^^^^-5 0 ft, M &7 D 7 -i^M- 

ySfRfti±©^^ x d , z d , x d + 1 , z d + 1 ^ttj^i-^T^^y xat- 

7f) 7— fgftlflfB 10 3 (^it 5Mf«7cg|$ 2 0 3 ^MI^jn^iMftf+JSA 
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lC«*fHW:0 (9. 2k — 4. 6) M±fcJfc^Ttt*jW^h£v\, Lfc#o 

«»*«o*^*7*H»w-l|[»!:^R*«.»ts^ra^-e«>So s = o. sm 

5 kiRfe-tZt, r©«-3l*tt*5i3J:* (9. 2k + 8) Mtl^tSCim 

So Wtto7Htd*i60^h (k = ieo) -e$>*Lte\ -©^7- 

10- TtB^jtSf ^fc^i fi{j; ^ j- f ! 6 0 0Ml , fe ^ ^ Zfrtit^X 

&m ttzz> vmmmfflm £ nx v > s 0 

btifcx;*/ ^ -HSF/SC (x d , y d ) fctf* LtttfrT S. HKcf 
*#?HSFtt*tt2 0 2#*h*3*»*«i*. 7*H*W-*» 2 0 2 figft 

*Rft*m^r7^1«T*Sto*7H»AdP=(x d>yd )©I«© 
20 dd + i.yd + i)0**05t>i d + 1 *IH[U 77^I«^^fcA^$ 

ti^^^v y i«Rfti±o^ P= (Xj y) i ^i^oiti^^ 2 03{: 

=?*v mtm mu^v ^77^ >mmxm ztitc**? u d ,y d ) 

©ffi«y d ©«56«rf?fc5 0 * # 7 HSFthiMB 1 o 3 Ii77^ >jffi#fcfeVNT5B 

fc* # 7 H**dP=» (x d . y d ) 5 d % 77^ >ME«f T?« $ frit* > =f 
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* yWfti±©^( d + 1 )P=(x d + 1) y d + 1 )©Ig©Hx d+1 , 7*7- 

t^*7Hf^(x d ,y d )^ffi^t5o 
5 * 7^:7° 3 6 0 1 f;i:}3^Tx d Xx^ff^^tt, ? T x $ f l ^ >o ^ 

T y -f 3 6 0 2 *5 V > T T j +1 ^ f+|f £ 5 0 ritl/^^TjI'ttxjX^ 

^n-c^. Lfc^oTx d x+i^f+^:$tL5o -^©l^^i/v^^T j icfam 

£3t5o ^"TVfZ 6 0 S^&WTxd+x/^ff^;^ l^v^^^T 2 {-^rt$n 
-5o TsT-y^Z 6 0 4k:46^-CT 2 +2A^ff-^ £ tL5 0 ^ .w-Cl^;*^ T 2 l£J3: 

10 x d +x^^J$tLT*Di9. L/c^oTx d +x+2A^f+»^tL'5o ^©^J^ ^ v>7 
^T 2 (^|rt^Jl§ 0 7^5/^3 6 0 StCjoV^TT! XT -LdmnZtL&o 
t^^^TjiuttxiX+l^l/^^Ts \Z. Itx d +x+2A^ -^tL^ni&^l ^T^o 
9, b/c^o-C(x d x+l) (x d +x+2A)^m-»^^5„ ^r©^^i/^^^ Tl ^^ 
^rt^tb^o ^Ty^3 6 0 6}C*3V^T 1 -2A^ff^^f l/ ^ )o --"e^^ 

15 T 1 {C«("x d x+l)(x d +x+2A)/5S|&^$tLT*Di9, Lfc^ o T (x d x+l) (x d +x+2A)- 
2A;^f|-lL £*T,§o ^(Dm^Ui/*?T 1 Kfa$h£ri& 0 *Ty?3 6 0 7 K::fc 
<^Tx d -x;$Si^-#£;|'K l-v^^T j (ClS-tt^nSo ^T^/SeoS^^T 

T 2 0 2^^Sff-^$tL5o wr-ei/^^Ta^^Xd-x^M^n-rjoi?, Ufc 
^oT(x d -x) 2 ^fj-^^tl5 0 ^©g*^ T 2 tM^^5 0 y^"ry 

20 7°3 6 0 9i^^TT 2 Xx d+1 ^H-f $^5„ £ £. "C 1^ Z?X ? T 2 Ktt (x d - 
x) 2 ^^^tlT*3«9, Lfc^oT(x d -x) 2 x d+1 ^f+^^^§ o ^-©SMiaS 
l^^^T 2 tdftj(ft$tb5o X7 L y'7'3 6 1 0td*3V^TT i -T 2 ^fHI £tb£ 0 
r £ T* U $ T ! \C tt (x d x+1) (x d +x+2A) -2Atf$ T 2 fU3 (x d - x) 2 

Xd + i^-tn-^tLtMrt^tl/T^Ds L-fc^oT(x d x+l) (x d +x+2A)-2A-(x d - 

25 x) 2 x d+1 ^f+^$tL5 0 ; e»^^i/-^^^ Tl {^ fl ^^ L ^ o 7f 6 
1 1 Kl:j8^T2BXyj&SfH££;h, % l/^^T 2 fc-*Mfti*fc'5« ^7J//3612 
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(x d x+1) (x d +X+2A) -2A- (x d - X ) 2 Xd+1 ^-^ n2l: tt l/2By # -ttt^U* 
^^^^ Ufc#oTCx d *fl)fc d + x + 2A) -2A- (x d - x) 2 x d + 1 /2By ^ ft* 

(x d x+1) (x d +x+2A) -2A- (x d - x) 2 x d + x /2By##|ft £ *i T ^ 3 „ * x d Ht 

JrlKMSfc: J: tJ ^ # 7 -ffiF/£©y£«y d ^s^5c £ ft 5 « & f^T© ii 0 "C 5 c 

yi»Ri«±0^fc50^ By d 2 =x d 3 + Ax d 2 + x d ^By 2 =x 3 +Ax 2 +x ^^ 
fc-f 0 i6WUU By d 2 ^By 2 ^f^L, ^SSf^t, ft64*#5. 

— *d> y d tta3 60«ffltJ:!)Me)^5. bfc^oT. 77^i« 
(x d , y d ) ©ftttt^-C^Tc $ ft fc ^ £ ft 5 0 
-tmmmii*TvZ?3 6 0 1, ^^3,^3 6 0 5, 7f^3 6 0 9, ^ ^ 

15 ^^^^3 6 0 8(z:*5V^^-pS#:±02^*(Dfh«^gi^ o £ ^ 

20 mmmz sm+s+i ©«-«sr^s fc -j-*. -mumm* * ? H»tw©tw 

AtJt^TttS^fC/h^V^ lltd^i 6 0 try hr-fcftkf, 35ig 

^*7H»tW©ffH|C*tti3*3j;^i 5 0 0M»t^aftbtt5 o S = 0. 8M 
»tKI=4 0Mi«^5ijBHK|[5B©fMl|E*tt4 5. 8MT?*,5, RES**;? 

±E^««rib*<Tt, ±mm&<DGm<Dmsnnxi* titty d aim* 
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JffifcT?* Sftfc* ^ y SWfR ft«Lb©j£ (d+l) P=(x d + 1 ,y d + 1 )©n 

x d + 1 &iti?)i-z> 0 3 o 1 1 tt, assfe numjBffi i ^-tAi-^o * 

T^4 3 0 2t tt, ,£P© 2 2 P^rffjfi-So n ^ T^Ptt^*Jffi«tZl*5 

10 ^SrfflV^T 2ffiF^2PSrtHp-t-5o ^fy/43 0 3 i Lt, 7—fg£r3MFB 
1 0 3{CA^^tbfc+f Rft^_b^^Pi:^^^7 0 4 3 0 2 j&2P%\ ,&© 

*&(P,2P) £ LT»«fti"5„ m^PRtJ«^2Ptt^M^-C^$.*b-CV^S.„ ^ 
yZflZQAb Lt, 3£$Cl ^^.^7 7— ltd© If y £ o 

— 3 1 5^?<o — ©rL&&m^v"5/i7°4 3 0 5 

15 ^fir< 0 ^Ty^ 3 0 5 t LT, ^l±i*D$-fr?)o 7fy/4306 i 

tt, ^^?7- Hi© I#B©tfs> h^-ffi^OT'&S^l T'feS^^rflJ^-f-So. * 
© fc* > h ©Ittf* o -efetLfcf^. — fx < o fcf y b ©|ft flS i -efctt 

y^4 3 10^T< o XTS'7 0 4 3 0 7 tLt, ItlBffiflltE. «t 9 ^ttfc 
©ft. (mP, (ra+1) P) h ,&mP t & (ra+1) P©*D^mP+ (m+1) P &ft & V \ (2m+l) P £r 
20 ff^-TSo ^f7fj/7 , 4 3 0 8^< o m-c\ #OHmP+(m+l)Pte N ^^=f 

0 8 t L T , M§Z&W IZ. X Y) » £ tLfcfe ©#fl (mP, (m+1) P) tf=> ,£mP© 2 2 
(mP)£?TfcV\ ^2mPSrff^-f-S 0 ^©i77jy7'4 3 0 9^fT< 0 :^t\ 2 
^3t2(mP)tt N ^^=f^ ySII Rftj»©lt*jffia»j:*5»t5 2{g#©^5£&;j^T 
25 i+^tLSo 7T5'/4 3 0 9i:LT, S'/4 3 0 8-e*fefc^2mPi:^f 
y ^ 4 3 0 7 -C* © fc (2m+ 1 ) P & jfe© jfl (2raP, (2m+ l)P)tUt, ©,|& (mP, 
(m+l)P)©ffcb!>K:*&*frf~5o -t©t7f y/4 3 0 4^5o ^rt\ ,&2mP N 
,£(2m+l)P, ^mPX^(m+l)Ptt^-C^j@i«IH:*3VNT^$ttT^So 
^431 OirLT. 4tJ£l£*fC J; «9 ^£*Lfc£©*a(niP, (m+ 1 )P) frb&a&b & 
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*»*«JPff^:«r«^TfH|[$n*. ^7"43 1Ut t> #JBBE*fc: J: 9 
*£*lfc£©*&CmP, 0n+ 1 )P) (m+ 1 )P© 2fflF#2((nrt- 1 ) P ) fcfrjfcv v £ 

5 (2n )+ 2)P^ff^-f- 5o . tO«^^4 3 1 2 -ff < 0 2**2(J 

$tLS„ ^^4 3 12iLT, ^T^4 3lOtt^(2 m+ l)P^r 
^4 3 1 1 -e*fejt^(2m+2)P^^cO|a((2m+l)P, (2m+2)P) £ LT, ^©n 

10 (2m + l)P, ,£(2m + 2)P, A-PXtMS (m+1) P^T»f^l^fe^ T ^^ tLTV ^ o 

^43i5iLT, HBrnm-vrntstut**- a m , y m , z m) ± V XmR J 

Y m +i.Z m+1 ) «fc5X m+1 Xt/2 m+1 Sr^-ix-enx d + 1 xrfZ d + 1 i-#r5 0 - - 

Xd + i> Z d+1 ±*K x d =X d Z d + 1 /Z d Z d + 1) x d + 1 =Z d X d + 1 /Z d Z d + 1 <hL 
<- x d> x d+ j ^r*^§ 0 ^-©^ ^5,^4 3 ! 3~4t< 0 313^ 

^sy^4 3 0 7fc^T*D*OW-3([* % ^y^4 3 0 8 iZ&^T 2fe 
25 »©lf»*^^^^ §o t4^6M+4SflDttj|I^j6«i45. xi7 ^ 

«©i»a©if y h©fi^itw ^y^ 4 3 1 oic^xummmm, 

^r^ 4 3 1 im^2M®ffIf^ i /, 5o fm6M+4S© 

w»*jeae-c«>s 0 ^rno»^i;:*5v^fc 6m+ 4s©n-ii^ g ^ 5o 

^ 4 30 ^ ^43 0 5, ^W4 3 0 6, 7f^4 3 0 7, 
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3 0 8. P^Ty^A 3 0 9 TbMteXT v X4 3 0 4. 7fy^4 3 0 
5, 77y7°4 3 0 6, ;*-7"y:7 0 4 3 1 0, 4 311. 77y/4 3 1 

2©,3£<9igL©[Ellfcte. (^^77" fifdcDt'y f*) — 1 E<t 7^5© X\ 
X4 3 0 2X*(D2fe%CDtmm:RXfT7 4 ^mm^^^COnWA^^m^Atl 
5 <£{$<Dtr^:ftW: (6M+4S) k + 2M-2S+Uft§ 0 r^T?k«^ 

^7-^dCDf5/ hft-Cfe5 0 — ^(Cfi. frMrSte. S = 0. 8Mi^, ff 
HSItel =4 OymmtWMhhfiZ><DX% l£W.(D%YW-m:tete#>Zi^: (9. 2 
k + 4 0. 4) M^/^§ 0 ffid^S l 6 0 tfy h (k=16 0) t? 

fcfttf. ±fB3MK© 7;v^!;X^©|Hifj:io jo £^l 5 12Mi45. 7*7 
10 — ltd© try hfotzVCOftWAb L "02*5 J; ^9. 2Mt*5„ A.Miyaji, T. Ono, 
H. Cohen, Efficient elliptic curve exponentiation using mixed 
coordinates, Advances in Cryptology Proceedings of ASIACRYPT' 98, LNCS 
1514 (1998) pp. 51-65 fCta. 17>f ^W>a > ^^^4«R ftjfStCdSV^-C, !7-f> 
K^ifeSrfflv^T-Tr^ tfr>J&*«:**i>£ \^ltm&Mm&&m^1tx* y—fgf+5? 

^*7^ fiiO^y h&fc9 <DH-^4fi*5*5«t-?: 1 OMiMfc b*K C;h,£tfMc: 
^Jffi*^©3Eijl©tHHti6SifiJS * § 0 fljfcff ;* # 7— ltdj&s 1 6 0 tr y 

h (k = i6o) -efcn^. co^*7-tff-I*fe©ftltf^fcj;^ 1 6 4 

20 l^&So 

ft. iSiS^^y— f^tr^2 0 2 fc:fcv>TJhfS^J(g©TA'=ry XA&JEv>&< 

Tt> x ^7- IffdRV*^^ yMt»P3ftj»Jb©j^P*»e>x x d , x d + 1 ^tt}^7 
■f Z> TA* =* y X K XtbV R~oM & "C fejft, . ffitf) 7VV =f y X A £ /g v > T V ^ t «t V \ 

^i7 7-^i+»^i 0 3\z^it^mmm5tU2 o 3om««5c^^m^h-^* 

25 ii5M+ S + I Xfo 9 , mttflHaS^^^— {gf+^FB 2 0 2 <D i!55i;*#y — ffiFtf 
IttC&SffcfUl*© (9. 2 k + 4 0. 4) M^tdit^<T«:5*»^/h$V\ Lfc 

^oT, x^7— ffiFtf-iiifpi 0 3<Dx$7—m^mz ! &mts:nw-mte, mm** 
7—mft&M<Dftmx#7—fc&mz!&mte&&-*t m£mmx&z> 0 s = o . 

8MM'I =4 OMir-fH^i-Sir, £. ©«-J|[*tt*5i3 J;^ (9. 2 k + 8 6. 
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2) MiM^5CH^5o fjt{^*7- Hdtfl eOlfj/ h (k=l . 6 

o) x-htii^ ^<Dx*9-mnmz>&m?mn-M:i$te&£^i 5 5 sm^^ 

*7—ffiF^(x d ,y d )S:ff3([btiJ^-rS t<7>"C&5 0 7-f <«l>'!7^x;l,^ 

— f£ff- 2 0 2^n^tt*S„ W3S^^7-ffiFtHfaJ2 0 2tegf:M&o7c 
- h Rft»R:*sv^l*»af*-c**n*:^* 7*H*jSdP= (X d , Y d , z d ) 

^^5^x d ^t>7 dN jt^jffiw-t^^n^^w^^ h7^*iiRft^_b 

20 ®^(d+l)P= (X d + 1 ,Y d + 1 ,Z d + 5 ^x d+1 XtJtZ d+1 Srtf-»u 

P=(x,y)i:*K:-?-©tff*SrJ6«t|t5nlf|J2 0 3{c^x.^ 0 M^tcSC 2 0 3li^ 
£frfc**<B**X d% Z d , X d + 1> Z d+1% xMyi^^x^i,^ 

!*RllifcjSW7^ii?« e hfc7*7H»fJ«dP-(x dl y d )Ol|| 
25 x d ^y d O^TcSrfr*5o 9— fSfef-JF$H 1 0 3 1477 >Jffi«fc*5V>-C 
Ste^CA*** £ * # 7 -ffiF* (x d , y d ) i tttB7]t§ 0 

M37 "^ **** y> x d , z d , x d + 1 , z d + l7 )^ t tt^j^ 

mmaEmz o H9^ffl*R*aifcj8v>Tjt»jfi«-c« 
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tzV-f^^is*. h 9 *§!$f R ftHJb©^ (d+1) P= CX d + 1 ,Y d + 1 ,Z d+1 ) ©Mil 
<D5^X d+1 ^t)?Z d + 1 , ^^7^— 0 3 ^A^^tLTby-Trc^^^ h 

7 ^atRftii±©«77 a i^mrnxm l*: (x, y ) & xt> u tir©^©-^ 
-c% mmm & ex i , y i , z d -c^n^tL*-r 0 £ titc —m&d t\^x 
io m±<D& (d+D p©77^ (x d + ! , y d + 1 ) x\ mmm & (X d + j , 

Y d + l7 z d+1 )-c^n^n*i- 0 

7 0 1 K::^TxXZ d ;6Sm-JlL£;ft, N ^ T 2 £ tL£ 0 ^ 

^^7°3 7 0 2tC*5^-CX d +T 1 ^fj-^^^ L ^ o - --^v^^T 2 fc^xZ d ^ 
l&^3^tLT*5«9. Ufc^oTxZ d +X d ^fl-^^tL§ 0 ^(Djj&SltfS \s iS* # T 2 \Z. 

is fett^tb^o *T-y?a 7 o 3 f^*5v>rx d -T j^tf^^tt, rrt^^^ 

T!iJ:ttxZ d dS*&*ft$^Lr*5 0. bfc^ 0 -CxZ d -X d ^m-#^^b§ 0 -t©3fe*j^ 

is£n5 0 r^t?w^^T 3 tj:ttxz d -x d ^jjft$tL-c*5i9, vtc.moxa d - 

xl d ) 2 m\-%&tlZ> 0 * Oig^^ ^ T 3 tft^$ix5 0 7fy/3 7 0 5 

20 md3v>TT 3 xx d + 1 *s^f-3S[^tb5o --^^**T 3 K:Kj:(X d -xZ d ) 2 tfM&fa 
ZtlXlS*), bfc^ 0 TX d+1 (X d -xZ d ) 2 ^fj-^$^^ o 

T 3 IM$W 0 ^^y^3 7 0 6t!l*3V^-rxXX d *StM|t*iX % 
t^$tL5„ ^^^3 7 0 7Kl:fc^TaXZ d tfSff-^£;i'K U>>^. ^ T 4 \Z.1fe 
»$tl5 0 ^T5'y3 7 0 8^^-CT 1 +T 4 ^ffI$^5 o irfU^^ 
25 T 1 tCttxX d *Su^^T 4 {e:ttaZ d ^tb^^j!ft$HT*3«9, L7t^oTxX d 
+aZ d a5tHfc£;ft,5o ^(D^^^^^^t iiJl^^tLSo 77S//3 7 0 9 
&£*5 V T 1 X T 2 jJS fj-DE r. C t? lx v?^ ^ T ! fixX d +aZ d U # 

T 2 \Z. «xZ d +X d *S«t*L-ett»j(fl £ nT*5 «9 % Lt^ot (xX d +aZ d ) (xZ d +X d ) 
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•7, L£^oT2bZ d 2 ^J|£ix3 0 -€-©jgf*^^^^T 2 iC«h(tt^5 0 ;* 
7 1 2-te*5V^T 1 +T 2 ^IH|[$tL5 0 - - -X?**?* 9 T 2 fc«t (xX d 
+aZ d ) (xZ d +X d ) ^ u ^ * T 2 id «2bZ d 2 «r*L^n«Mft $ ft 5 % L # 
o T (xX d +aZ d ) (xZ d +X d ) +2bZ d 2 fffff* - $ ft 3 „ * ©ft** ^^n^^ 

^T 1 {Ctt( x X d +aZ d )(xZ d +X d )+2bZ d 2 ^^$^,T*5^, Lfc^oTZ d+1 
( (xX d + aZ d ) (xZ d + X d ) +2bZ d 2 ) # s ff# £ ;fa-5 0 * Oftft* f 5?* * T 1 
£*L*. Xf^3 7 14m^T r T 3 M^5 0 ^t^^Tj 
f-ttZ d + 1 ((xX d +aZ d )(xZ d +X d )+2bZ d 2 )^W^^T 3 {CttX d + 1 (X d - 
xZ d ) 2 *s*n^*UM«! **LT*5 5 . b*:^o-CZ d + 1 (CxX d 4 a Z d )CxZ d +" 
X d )+2bZ d 2 )-X d+1 (X d -xZ d ) 2 ^ff-#£ft£ 0 ^(D&M&WxfT 

^y^3 7 l 5te*v^2yxz d *«-J|[*^ i^**t 2 jcftaws 

15 *L<5 0 ^W3 7 1 6Rya^TT 2 XZ d + 1 *S»J|[S*LS b 

T 2 lHt42yZ d iS*MA$nTfe5, Lfc#o T2yZ d Z d + x aSfWSft*. 
^>^n 2 il^^5 0 ^^5,^3 7 1 7fci8V^T 2 XZ d jJSffJ|[$n 
<5 0 -^t 5 l/^^T 2 {C«2yZ d Z d+1 ^^ $tL - cfe ^ N L/c^oX2yZ d 

Z d + 1 Z d *S*MA$ttT*5?J, L*i*oTl/2yZ d Z d + 1 Z d *t«-J|[^ So ^ OJft 
*^^^^T 3 JC*tt$*l,S 0 ^7^5/^3 7 1 Sm^TiXTsTO^ 
^^^!-^^T 1 fcttZ d+1 ((xX d+ aZ d )(xZ d+ X d ) + 2bZ d 2 )-X d + 1 

(x d -xz d ) 2 # i^* * T 3 ^«i/ 2y z d z d + 1 z d ***b^n«art * *s o , l 

25 ^^^-C(Z d + 1 ((xX d+ aZ d )(xZ d+ X d ) + 2bZ d 2 )-X d + 1 (X d -xZ d ) 2 )/2yZ d 

Z d + 1 Z d iSW-**^S 0 ; e0^m^l^^^y d {c:^$tL5o 7f^3 7 2 
0fc^TT 2 XX d *fH|[*tt« o ^^^^T 2 te tt 2y2 d Z d + 1 il*#i 
**t-C*S!K U*:*oT2yZ d Z d + 1 X d *fH|[**L5 0 *©»*asi^**T 2 
fc*Mft£*L3. ^^3 7 2 1fc^tT 2 XT 3 «^ o 
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X * T 2 \Z. «2yZ d Z d + j X d i?X ? T 3 l/2yZ d Z d + 1 Z d ^" ^ ft^j%mti 
£tlXte<9s L7t^oT2yZ d Z d + 1 X d /2yZ d Z d + 1 Z d ^3f £ft£ 0 ^(D^M 

Z d + 1 Z d tmMl£tlX\,^ 0 Ui?X?y d KfexTy^3 7 1 9 K (Z d + 2 
5 ((xX d +aZ d )(xZ d +X d )+2bZ d 2 )-X d+1 (X d -xZ d ) 2 )/2yZ d Z d + ! Z d £ ft. 

^Mf^fT&frft ft V > CD T% ©M^^ $ ft T V % § 0 
_h!5^jt!I{£ J: 19 , #;ifcft7tx, y, X d , Z d , X d + 1 , Z d + 1 frtb?^( 
v-^ h ^ ^Mtf R ftlUfc&tt 5 ^ # 7 —flfiF^OT 7 ^ >M« (x d , y d ) m*3tt 5 
fll^f «5c$^5SStt^T<755i «9 T?&5„ ^(d+l)Ptt^dPK:jfePSrin*b/t 

XhZ>(DX\ y d 2 =x d 3 +ax d +b^Lt>y 2 =x 3 +ax+b^^fci- 0 f2 7i^AU 

y d 2 ^t» 2 ^m*L. s^iatst, 

y d = {(x d x+a) (x d +x)+2b-(x d -x) 2 x d + 1 }/(2y) -^[7 0 
15 ^#5„ ::tx d =X d /Z d , x d + 1 =X d + 1 /Z d + 1 T*fc^ -Offi^ftAi" 

y d = {Z d + 1 ((X d x+aZ d ) (X d +xZ d )-2bzi)-(X d -xZ d ) 2 X d + 1 }/(2yZ d Z d+ . 1 Z d ) 

-#7 1 

x d =x d /z d xhZ>$K i£7c&W-(Dmm&mbirg&)Xy d (Dft-mkm&-tZ> ^ 

20 i <fc «9 . 

x d = (2yZ d Z d + 1 X d )/(2yZ d Z d + 1 Z d ) -§fc7 2 
£&5„ :rt\ x d , y d ttg| 3 7T^Lfc^Q;S{o:«t V -5-z_tbti& 0 L-fc^o 
77^ VJEEIR (x d , y d ) (D\m^xmjn £ ftT V <» 5 £ t Klft <5„ 
±IB^JWtt^7 t S'^ , 3 7 0 1 „ 77^/3 7 0 5, 7x^7*3 70 6, 
25 7°3 7 0 7 % 775/^3 7 0 9, ^^7° 3 7 10, ^TS/7°3 7 11, ^^5/ 
7*3713, ^T7 7°3 7 15, ^7- 5/^3 7 16, *Tyzf3 7 17, 
7°3 7 1 9, ^=ry^3 7 2 0&TfxTy73 7 2 1 fc:fcVNT^I8ffcJL©^3t<E> 
fUtaSri^Sir-t-So y?3 7 0 4 \C^X^m^±<D 2m&<DnW- 

A&&mtirZ> 0 ^7^3 7 1 8 ^*5^Tffi#:±<D^7c^#(Df+^ft 
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5n?S£©tf-£Ljt£ I t~f~& k-> ±mmWM 1 4M+ S + I <Dft&X& 

d&16 0 tf s> rT?*>*tf*, «^^7-^ff#C9ff»»tt^J;^ 1 5 0 OM 

H"J|E-e#^«x d , y d ©|t^tt5c-e#5 0 ^rO»-^fc*5V>T«— /K«J{c«.5utC 
iKS £ 5 if IttflSiBifci- 5, 

15 i~5 0 

mm**^-immM2 0 2xi^ 03izAjj£ti±?4 

7 * M*f R ft ; ftfc^tltMf^ * hit x * 9 HSF AdP- (X d , Y d , z d ) © 5 
■*bX d &0?Z d> «Sf*^iit!7^x^^ h^^^+tP3fta_h©^(d+l)P 
20 =(X d + 1 ,Y d + 1 ,Z d + 1 )©5*>X d + 1 ^Z d + 1 SrttJ^i-5 0 7/^44 1 

RftiimMiia ^^/t^(^tt§ 0 i®j**abfe*ue>TjftPt-f 

&o ^ts/7*440UU, ftlMf lHUt§ 0 7f^4402 
£LT. ,6P^2fi^2P£ff|fLi-5 e --T?^CPWtltj^ffi#|2:dSV^(x,y f l)t 

/^2PSrW-J|[-t-5 0 7f^44 0 3at, ^*^*HSFtHW»l 0 3 iCAXtsfi 

itnmmm±<D£PtaTy?4 4 02^^^ a©*&<p,2p) t 
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4405^u, sasjfei «ri*Uip$*s. ^7^44 0 6 at, 

-CfetLtt*^ fs'^44 0 7 ^ft < o ^©t'y h 1 T*&tLltx T y 7" 4 4 1 

5 0 < 0 ^^^^°44 0 7 t L T , iC £ «9 ^ $ n tc A <0 ffi. 

(mP, (m+1) P) h ,£mP t M (m+1) P(D*D#mP+ (m+1) P&?f?3: V \ (2m+l) P^f+^-f- 
§o ^©i^7«7^4 4 0 8^<o *P»mP+(m+l)P{i N ^e^=fp<y§y 

ffiRftli(Z)|tf^tl^-*5it^D^^fflV^Tf+^$i^5o ^7^/4 4 0 8 t 
Lt, l+^^I^J; "9 ^$nfc^Offi(mP, (m+l)P) fab&mP(D 2fg# 2 (mP) Sr-fT 
10 J&V\ ^2mPSrfHf-f-So ^©t^7y74 4 0 9^<o ::t\ 2{£|f2(mP) 

^T-5/7°4 4 0 9 £ b"Cx ;*7^4 4 0 8 T*?0t#)fc&2mP b 7 7 y ^4 4 0 7 
-e^fefc^(2m+ 1 )PSr^C©je(2mP, (2m+ 1 )P) h Lt, ,&<Z5,m(mP, (m+ 1 )P) (D\\ 
^^iCtlfitSo ^©t^Ty/4 4 0 4^M§ o w^-C\ M. 2 mP, ,£ ( 2 m+ 

15 1 )P V j£mP]&TJ«;£(m+ 1 ) Pfi^Tlt^M^^^oV^-C^ $tlTV 77^/4 4 
1 OiUT, M^M^tC J; <0 & £ tLfc^tDliLCmP, (m+ 1 ) P) fabMmPt M (m+ 1 ) P 
<D;WmP+(m+l)P<£rff#V\ ,£(2m+ 1 )P£fr#i-5 0 ^©f ^7 5'7°4 4 1 1 ^ 
?T< 0 ^-T\ *n»raP+(m+l)P^ ^>-=fpi V ^fR fti^©ltf^l(C*3{t -5^0 
JI^£Jf ^Tlt^^tX-So 77^:7*4 411i IT, ttiMSfdJ; «£*Lfc 

20 ,£<Z>,m(mP, (m+ 1 ) P) frh & ( m+ 1 ) p<7) 2 {£3f 2 ( (m+ 1 ) P) <H?fc V \ & (2m+2) P^ff 
lf1-5o »7-774 4 12A|f< 0 ~ r.T\ 2f^»2((m+l)P)tt, ^i/rf 
^ yMtfRftl^©ltf^l^*5ft^ 2{g||©^£^TfT3|L£*1.5 0 *7;y7 
4412i L-C\ *Ty74 4 1 0 fc.&(2m+ 1 )P£ 77$>:/4 4 11 

fefc^(2m+2)P^r^cD,m((2m+l)P > (2m+2)P) £ Lt, (mP, (m+1) P) <7>ft;b 9 

25 ^^Irt-fSo ^©^7^/4 4 0 4^15, rr-C\ ,&(2m+l)P, ,&(2m+2)P N 
^mPS.t>^^(m+l)P(i^T*r^M^{Cl*5V^T^^ttTV^?, 0 77-^44 15^1 
T\ ^>=?s* yiH Rft^^*3(t^>^(m-l)P^, !7^rc,i^>^ h^Stff RtM 
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*mftm&m±x*M&mmT»mtstifr£jzmmu *n^nmp= (x m ,Y m) z m ) 

X.mm+l)P= (X m+1 ,Y m+1 ,Z m+1 ) ifcb7cfeTfi#Ei- 0 Y ra ,£r>* 

5 -efiYM^^*^6§*:^-eg^^ v ^ (D - e% 3fc£o-CV^V\, ^7^/4 4 1 3 £ L 
T\ r7^x;k>^ h^^M*«R*li±T^f^^-c-^$tL7 t c^mP= (X m , Y m , 
Z m ) £ tJX^^^^^Xd^^Zd £ LT, I7^rcyv^^ h7«fRft 
«-bT?J*»aW«*ix*:A(^l)P« (X m+1 ,Y m+1 ,Z m+1 ) £*)X m+1 2W 

10 b*%7— fi:dtet> h*^#?b< ^bf^otf-/ ^/^-y^i:^^^ 
y^fRfti^oltf^^}c:4oit§^D»^(Di+^»(4 N zi=l£ 

^ 4 0 7{-*5V^T^n»<Dfi-^fi N 77 3, / 4 4 0 8 fcl&V %T 2 fgFjf 

^^4 4 1 lJ-d3V^2ffiF||[O«-J|[*^Si:3a : s 0 tftfc*)6M+4SO 

20 ffSfi^j^-efeSo v^tt©^^c*5v^t 6M+4 s©fh3J[*ds^-cfc5 0 

77-^/4 4 0 4, ^7^4405, ^f?/4 4 0 6, 77-^4407, 
^7^/4408, ^7S'/4 4 0 9Mtt775'7 B 4 4 0 4, 77-7/440 
5, 77^74 4 0 6, 777/4 4 1 0. ^7y74 4 1 1, 777/4 4 1 
2 ©,#«9 3gLOHJ^fi, (X7J7 — filed© hTy hS) -HHt/jlS©-?, 
25 /440 2-e©2»fHii77 77°4 4 1 6T*<D^>-:=?p< yMfifRftULL 
©^^O^m^^^tf-^AS.t/77 7/4 4 1 5f©!7^x;^ h^Mff 

+ 4S) k + 2M-2St45 0 -wT?ktt*;&7Hftd©fc> hS-Cfc5o — 
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(9. 2k + 0. 4) Mbft&o WtLlXxXJ—fedtfl 6 0 b 
(k = 1 6 0) Xhtll^ ±IB^Ii©T^=ryXA©tHHttj3i3 < t^-l 4 7 2 
Mi45o ^^^HttdOlfy h*>/t«?OtH|[*i UTtt:*5J:-t9. 2Mi*5. 
A. Miyaji, T. Ono, H.Cohen, Efficient elliptic curve exponentiation using 
5 mixed coordinates, Advances in Cryptology Proceedings of ASIACRYPT' 98, 
LNCS 1514 (1998) pp. 51-65 \M S =^J^=. b ^^MHP3ft^{^*3V>T, ?7 

10 — 1 6 0 tfs> b (k = 1 6 0) X&tli^ £ ©;*7J 7 — f£ftjf^7 

^(DWjrMMi-tiS^X^l 6 0 0Mi/j;5 o UfcflSoT. JtlS*389§fc: «t -S^JiRcD 

ft. i^iST. 7J 7 2 0 2^4oV^T_hl5^JlROTyV=f y XA2rJ8v^< 

^7J7— f^f+^l 0 3Kl:fc**£ffi««7G*B2 0 3©jfM5ct^g*IHl 
ttl 4M+S+ ITfct), 77 7 — {£!-rJf£[$ 2 0 2(^i«jS^7J7— 

ftlltCi&^ftfi-^fiCD (9. 2k + 0. 4) MirfcJt^-CttSAMJl/jN^VN. bfc 

20 *;&7H&?hhri 0 2>(o^n 7—m\%K>&mm\%m$. mm** 

^~mnn^(Dmm^t>^-mfbm^m^mwMtmtmm^h^ 0 1 = 40 

M, S = 0. 8Mi^-T6^, r<Df+##tt*5^oJ:^ (9. 2k+5 5. 2) 
MMfcSiH^'ISo ^X(f7*7-fd^i 6 Ot'j/ b (k = 16 0) 
"X?*>tb«, ^co^7J7-f^t+^(^S>fefi-»*«*5*5j;^l 5 2 7Mt*5„ ** 

25 R*it LT^-rx^i h7^iffiRftM^L, v-oFvm&m^^x-y 
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-C&5o -f-fcfr*>, ^*7*HSFWJ|[ftJi 0 3©Atb^^^:Mv^4«^Rftj»ttl7^3l 
A->»h9^ffl#»R*H"e*,5. fcfcU ^9-ffiFtMMBS10 3©rt«UOtm: 

10 i#^e>nfcr7^^^>^ N^^MffiRTOjKD^p^^^^^^^ f, 5 ^ s 

*f R i8ilftK:«sv^TMI$M»lT« * *Lfc* 7 H**dP= (x d , Y d , z d ) cm*© 5 

(d + i)P=a d +i.Y d + 1 ,Z d+ J)©]**© 5 t>X d + 1 St/Z d+1 SrW-3|[U T 
7 ^ ^ffi«-e**tt*:A^ £;fxfc V h 7 R gjjg§Lb©^p= (x, y) 

20 M38(a^ Sl,yX, Z d , X d + 1 , z d + 1 ^ b ^^ 

* *Lfc * # 7 -ffiF/SdP- (X d , Y d , Z d ) ^JM^O 5 d X U?Z d % Jflgffi* * 
^^x;^^^iffi RWJ: ^ (d + i) p =(Xd + i)Yd + i)Zd + i)o 

25 II©HX d+1 MZ d + 1 , ^*9-ffiF«-i|[«10 3«c:AA**Lfc!7-f^^ 
- h^if|Rito^77^aTJ«Lfc(i,y)^U UT(D^m 

vHmmm»^x*i&*mmifi±*. ***** <x d . y d , z d ) *&i3-tz> 0 
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(x d ,y d )-C\ »«Jffi««rtt d ,Y d ,Z d )-C-tiX-Pn*i-, !7^x;l/i/ah7^I« 

(x d + !,Y d+1 , z d+1 )-e^tt^ett^i-o 

5 ^^^7°3 8 0 1 ^^^XxXZ d ^mM^fi. i^v 5 ^^ T 2 lcfem£thZ> 0 * 
=T-y-7?> 8 0 2 lCdoV^TX d +T 1 dmM&flZ>o rCT'V^^Tj (dttxZ d ^ 

T ! (C«xZ d ^|rt$tLr^«9 , Ufc7)So-CxZ d -X d ^ff#^tL§ 0 
10 ^-J*#T z \Z.W$h^fhZ> 0 ^=Tys+Z 8 0 4lCte\,^Xl>'i?*?T 3 CD2m^wi 
I^tl§o ^r-T?lx^^T3^«xZ d -X d ^^^tLTj3«9. L fc ^ o T (X d 
-xZ d ) 2 75S|+^$nS„ ^©Mm^l/^^Tg^^^o 77^^3 8 0 
5{C4oV^-CT 3 XX d + 1 ^f+^$^S 0 m?lx^^T 3 (3l«(X d -xZ d ) 2 A>fa. 
m&tlXte*), bfc^oTX d + 1 (X d -xZ d ) 2 ^ff-^$ti5o ^cD/fSm^^^^ 
15 ?T 3 \^Wi$h£flZ> 0 *TyZ?3 8 0 6 i^m^XxXX d miM^tl, L-v^^ 

TjM^^ ^7"^^3 8 0 7 icljoV^XaXZ d ^ft^:^^ v l/v ? ^^T 4 

Kfa%H£tlZ> 0 8 0 8 t*3^TT 1 +T 4 ^D-I$tl5 0 ^Ct^ 

^ T ! iCtexX d ^^n 4 JUSaZ d $ tlXio <0 „ bfc^S o 

TxX d +aZ d ^frf-^£tL5o ^^Jg^^ut/^^TiiclM^tl^o 8 

20 0 9 {cljoV^TT 1 XT 2 fimW-£frl& 0 - - XWJ^ ? T a (Zl{ixX d +aZ d & Ui? 
* ? T 2 K: texZ d +X d tfS ^^L^^^ £ tLT *5 <9 % U fc o T (xX d +aZ d ) (xZ d + 
X d )^fJ-^$tL5o ^©^^^l/^^^TjfC^^tb^,, 77^3 8 101: 
:!3^Tl^;*^Z d ©2ffl;^ff^£;ft,, W^^T 2 {;iM3£tl3 0 ^rs/7°3 
8 1 1 fCjo^TT;, X2b^f+^$^t§ 0 - ZLT* ^ T 2 ^^Z d 2 ^fe$3£;ft, 

25 T*3«9, Lfc^ 0 T2bZ d 2 ^ff^^^5 o ^©igl^ l/v 5 ^ ^ T 2 (M$tlS 0 
*Tvs*3 8 1 2lZ.£>\,^XT 2 dmg.£thZ> 0 - --ei/^^T 2 fcltt: 
(xX d +aZ d ) (xZ d +X d )^l/^^T 2 J,Z te2bZ d 2 # -ttb^tLfeJjft $ ^Tfe t) N b 
fc^ot(xX d +aZ d ) (xZ d +X d )+2bZ d 2 3$ ff H £ H 3 0 WB^^^Tj 
K:*&&'j$*L£ 0 ^^ix7 0 3 8 1 3m^T! XZ d + 1 ^ff-#£;ft3 0 
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^^T 1 tett(xX d +aZ d )(xZ d +X d )+2bZ d 2 &#M£tiX*S*> , LfcjtfoT 
Z d + 1 ((xX d+ aZ d )(xZ d +X d )+2bZ d 2 )^|t^ $n§o ^^^Si/^^ Ti ^ 

* T ! ftZ d + 2 ( (xX d +aZ d ) (xZ d + X d .) +2bZ d 2 ) 1/ ^ T 3 ^ «X d + 2 (X d - 
xZ d ) 2 ^4x^niMfi$nT*5t» , Lfc#otZ d + 1 ((xX d+ aZ d ) (xZ d + 
X d )+2bZ d 2 )-X d + 1 (X d -xZ d ) 2 tmmstlZ> 0 ^(Dm^Uiy^-^Y d \Z.W^ 
tlZ 0 ^7^38 1 5fc*5V^2yXZ d *f|^[$n, T 2 fc**«|*tt 

5o *^f^3 8 1 6(^TT 2 XZ d + 1 ^I^5 0 -tV^n 2 

l,^n 2 m^ 0 ^T y /3 8 1 7fc*5V^T 2 XX d ^tHI*tL5 0 
^rT^^^T 2 (C(i2yZ d Z d + 1 ^ $tlTfe ^ b^oT2yZ d Z d+1 

^■CT 2 XZ d #fH[^5. --^^^^T 2 (^2yZ d Z d + 1 ^^$tlT 
Y d IC|±7f^3 8 1 4 ^^Zd + i((xX d+ aZ d )(xZ d+ X d ) + 2bZ d 2 ) + X d+1 

(x d -xZ d ) 2 ^^^ n> *©tBE*#?rfc:fejh,fcVN©-c, *©Wj$^t 

^^X d iU^f^3 8 1 7m^2yZ d Z d + 1 X d «^^ * 
±B?IfcJ:D4^iijti, y, X d , z d , x d + lN Z d + 1 *^!7^,w> 
^T*7n$ttSMttOT©ii5 -CS,5 0 ^(cH-DPttjftCdPfcjfiCPSrJnlfUfcjftC-C 

Sir, t*2 7*#S. ASPAVAldPtiV 4 b?x3m P)&m±<D&-?h 
25 <5©T\ yd 2 =x d 3 +ax d+ b^y 2 =x 3 +ax + b^^/c-t- 0 i2 7^UU y d 2 & 
t5y 2 *«*U **mmtZk* »7 0Sr#S o £ ifx d =X d /Z d , x d+1 

=x d + 1 /z d + j 5 , - ©MrftA-rs r t (c j; *> tt&mmo^ t mm-r 

»7it#5, x d =x d /z d -efcs^\ a»7c*3|[©ia**»b-fBW-e 
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Y d =Z d + 1 [(X d x+aZ d )(X d +xZ d )+2bZ§]-(X d -xZ d ) 2 X d + 1 -t7 3 

2yZ d Z d + 1 X d -17 4 
2yZ d Z d + 1 Z d -17 5 
5 ic£<9 je£rt-*ifc£«fcu\, :^T% X d , Y d , Z d tt|H3 8T^byt^S^J: 

^fbSo bfc^oT, ttB^(X d ,Y d ,Z d )^a:tt^T«7U$^fcCi:^^>5o 

±fe^M(i^X^7°3 8 0 1 „ ^7y^3 8 0 5 4 8 0 ^T^jy 

^3 8 0 7, ^Ty^3 8 0 9, T.TyfZ 811, 77^3 8 13, ^^5/ 
/381 5, ^TyZfZ 8 16. 77-7^3 8 1 7M77J//3 8 18 tCrfcSV 
10 T«f$_b(Dm»CDf+#4^M^i-5 0 £fc N 772//3 8 0 4^i^7j/ 
7°3 8 1 0^*DV^T^TPm*JiCQ2^©f+^4^^^i-2) o fflf*_b^A0^ 

»»^rSi:-r5i:. JtJB3UKtt 1 1 M+ 2 S ©fHtt£&3?fc-*-5o CLixttflS&jg 
15 x%7—&&M<DfHr&*k}k'<X&%>1b*iz:/h£\,\ {filt^^IdiSl 6 0 

hT*fctt^ ^5^7777— fl&fhjf©tfsc*tt*3i3 «t 1 5 0 oMm t&mh 

bti& 0 S = 0. 8Mt<K3^f-5i:M««7C©fHHtttl 2. 6MT*fc9, ifSiS 

jhX^ tV^rt **** $ tt/c 0 
20 JhfB3MM&£ bfc<-Cfc, _b|2ff-»^Cj; «9^^L^tLfcX dJ Y d ,Z d (D»S 

Y dl z d ^f7cr^5 0 ^e^Lb© te: is v ^ x r± — it£#3 \z.m.jt\z. &m t 

25 jfcfcl, fltdX^y^^i/a. h7^SflRftl±0»b, X d , Z d , 

X d + 1 » 2 d + ! ^ttS^i- 5 T^=* y X^fcoi/^!ait5 0 

Sill 8^»J<5DJ^jS^^7— {§1+^2 0 2<D^$7#^— ffiFfHIE^fet Lt, 

t^^/V^ hy^SffiRill©^^, X d) Z d , X d+1 , Z d + 1 £fcb;ft 
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ffid^!7^m^e/^ h7^1ffiR«±©^f> % x d , z d , x d + l5 z d + 1 
5 t>J:i\> 

»M^ff»»CO (9. 2k + 0. 4) MtlZtt-<XteZfaiZ,b£\,\ 
oT. 1 0 3 7-f fUt^^ftlitt, 

io -i^m.u<o^m^t,^~\mm^mfmm-mtmtmmx^ 0 s = o. s 

Mt ^ t5 ^ -®W"**ttfeS3J:^ (9. 2k + 13) MkXjmhZZ.k& 
T?£5 0 iil^^7-fd#i6 0f>F (k=16 0) -C&*U3\ ^©^X7 
7-HSFfH|[{^S*^»tt*3j3 c J:^l 4 8 5Mi^ tfm&mt Lt^x 

mi 9<Dmmmmmmmt Lx7*^w>^hyxmmBmm*m^±h<D 

20 ^h^IHRMT^5 0 fc*?U «7-fflF«-JMS 1 0 3 ©rt*©fm 

xfcm-tzmFi&mt it, ^feii,*:^^^ h?*mH 

25 =7— »/S(x d ,y d )SrfH|[UtiJ^7«t"S. ^77 7-fiid^t>'y^^yl.^^ h^Mffi 
Rft«U:©^PSr^*7-ffiFff»Sf|Ji 0 3 KAAtfi £ 7 2 

0 2^nSr^ftffil5o *»^*7-ffiPtH|E*P2 0 2tt£ttJftofc;*#7. H |td 

^Rftto^T77^MT^^fc^ 7 ^dP=(x d ,y d )«© 
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= (x d + 1 ,y d + 1 )<7?M^<D5^x d + 1 ., 77^ ^J6*t?3fe$jx*:!7>r3i/i>'>=. 

H9^SfllRftj||Ji©^( d -l)P=(x d -l,y d -l)Offi«©5fex d -l&tf|lU T 
7 4 vlifS $ titcAt} &tlit V 4 ^-J^=c h 9 R MLhO,£P= (x, y) 

vjfte«-c*$twfe:^* 7— f§^dp= (x d , y d ) <Dmmy d com7i,^n^ 0 o 

10 m^MZ 9SC<fc«9, M^x, y, x dN x d + a as^x. fcjjxfcW^K:, x d , y d £rtti 

T?* $ tl±X% 7 — ^^dP= (x d , y d ) <DJM® CD 5 *>x d . 77^ ^M^l?* $ ft 
7t !7-r m/u^3 h 7^SlRfti±<Z) ( S (d+1) P= (x d + ! , y d + ! ) OM^CD 5 i~> 
15 x d + 1> ^^7- fflHH-JMBl 0 3ie:A7^$tLfc:y-riii/Piy3. Rft&lLh 

T^3&ja5«^#^. £> tbfc * * 7 — fflF/S (x d , y d ) £ ffi7Ji-3 o 

^T^/S 9 0 1(^^Tx d Xx^H-I$tl s ^^T^M^Wo ^ 
^77*3 9 0 2 JiljoV^T i+a^ff^^tLSo ~ ;t^7^T j ^(ix d x^S|§. 

20 mZnXteK), L7c^ s oTx d x+a^f-f^$tL'5 0 ^©gf ^i/^^Tjt^ 
£*L5 0 7^5/ 7° 3 9 0 3 Kl:fo^-Cx d +x7$Sf+Ji:£;J^ Ui?X?T 2 lZfa%fo£ft, 
£o ^ry7"3 9 0 4Kl:fo^TT i XT 2 ^ffW^n5 0 CiT'^^Ti}: 
fix d x+a3$ l/^?T 2 ('Hx d +xt> ^ tl^fth^m £ foX *3 <0 > Lt^ot 
(x d x+a) (x d +x)/^fi-^£n5 0 ^rCD^^l^^^T j^M^tL-So 7x^7" 

25 3 9 0 5(Cfc^TT 1 +2b^f $H5o - -~C T j fU3(x d x+a) 

(x d +x)#M£tt£;frT:fct9, tfc^o t (x d x+a) (x d +x) +2b^ffl $tl§ 0 ^(D%£ 
Mfcisi/xfT 1 lzfcim£tiz )o ^TyZ?3 9 0 6 iCjd\,^Xx d -xi>mW£tl, 
l/^^^Ta^^^ft^o ^fy7°3 9 0 7iiI:^TT2©2^f+Jf£*b5o 
rrt^7^T 2 Kltex d -x^^ &tiX$$ 9 N LTt^o T (x fl -x) 2 ^f+Jf $ 
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7t^oTx d + 1 (x d -x) 2 ^ff-^^^^ o ^©^^^^^^T 2 (e:^lrt^tL-5o 

5 (x d x+a) (x d +x) +2b/5S U ^ T 2 tex d + j (x d -x) 2 J^ft^&tt $ *IX& 
*>. L^^o'C(x d x+a)(x d +x)+2b-x d + 1 (x d -x) 2 ^|t^$t L ^ o *<D&%:fr 
l/^^TjM^^,, ^fy^ 9 1 Otd^3V>T2y©iS?5n^fMf V 
*S*9T 2 \ZLifc1tiZfrZ> 0 *^ryzf3 9 11 {C^^TT 2 XTg^fHf $*L§ 0 
^tl/^^Tifc f 4 (x d x+a) (x d +x) +2b-x d + 1 (x d - x) 2 U *? * * T 2 »C 
10 ttl/2y.*S^rtL-etL»«l$nT*5!3, Lft^oT <(x d x+a) (x d +x) +2b-x d + 1 (x d 
-x) 2 )/2y^ff#^tL§ 0 *Ofe^Wi?^^y d fc»J|l|$tl5. Lt#otU 
^^^y d ^«((x d x+a)(x d +x)+2b-x d + 1 (x d -x) 2 )/2y^|ft £*VC^5 0 U 
z?x * x d < JEW wxAJj £ § ixx v > 5 0 . 
-LfE^JIRfc J; 5 ;* # 37 -f^©yM^y d #«5g «^T^il 19 -C£><5 0 
15 ^(d+l)PH:^dPm^PSrADj5b*:^-e&5o V ~ h 7 xmiKPiMMUDT 

h7^i^Rii±^ffe5©t\ yd 2 =x d 3 +ax d +b^(^y 2 =x 3 
+ax+b^^fc-t- 0 tfc2 7Mtf;AU y d 2 &t>y 2 £*i*U SC^fiS^S ^ ifc7 

20 :7^jffi«Cx d ,y d )©ft£^ r t*5GLT^3:: £fcfc5„ 

±15^)11(4^^ 5/^3 9 0 1 x 7f77°3 9 0 4, ^Ti//3 9 0 8M^f 
y^3 9 1 lfc&^X*mfr±<Dm*<Dl1rM**:&mb1-& 0 Sfc, ^y^3 
9 0 7tcd3V^WPfi^_h©2^3t©tf»Sr^i:-t-5„ $ ^^7^3 9 l 

^xit&m4-£^<DxmMLx&£\,\ ^m±<Dm»(DnnM^M, mtt± 

4m+s + i (Dtrntttomk-rz. ^ti^m^^v-mnn^nw&tit^ 
r«5^(c/h$v\ «^(^^7^td^i e o }±y vxibti^ mm**?- 
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ffiFtm©tHF»4i8*5J;-?:l 5 0 0MS^JS.8ft>e>tu5, S = 0. 8MSt>'I = 
4 0Mi:<R^f5i:ffiWa7cOfi-3|[*tt4 4. 8Mtfe^ f^f-HI 

5 m, ±mmmttb?£<xh. ±mm^(D^m(Dimm»x%fri&y d <Dim$ 

7— f^H-^ 202 -m, 7— ^tt^gp 103 ta^ ^^ntcuA 
7 ^M+fRft^iiiiov^-cT ~7 4 ^mmxm $ n/c^ # ^ — <g,&dp= ( x d , y d ) o 

0 1 t LT, «I fcl^SIHfil ^r-ftAi-^o ^T«^4 4 0 2RT, ^P©2 
f^2P^fmi-5 0 rr-C^P{ittf^Ma^*5V^T(x, y, 1) t Lt*U 

=v ymmB&mcDtt&mm^tei-fz 2^(D^^m^^x 2^2P^i+#i-5 0 

^4 4 0 3 i: UT, 7— {^1+^15 10 3 KAJj ZiMttfi R ftlfLLtfXfe 
20 Pi^r-7/4 4 0 2l:-*fc/c^2P^ MKP.2P) t ttl&lftt5o ritiiP 

&xf&2?teMmm.Mxm&nx\,^z> 0 *t?^4 4 o 4 tvx, mwci t^x? 

— m(D\f-y $C-fZ>fa¥?fa%m7£L,, — ®C-rtb«'^^ 5 /7 D 4 4 1 5 

— fT< 0 -i:t^mtt^Tj/7°4 4 0 5^ff<o 7TS'7 o 440 5ttT > ^ 
ifc I £ l*i;tjn£-£3o ^T5/^44 06^U, X^7-I©I#SOt'^h© 

25 fi£^o-es>§7)^i-efc§^^ij^i-s 0 ^co\?y h(om&oxhm-£xTy7'4 

4 0 6— n< 0 %<D\?-y Y(D\m i 1.Xhtl\'£^Ty74 4 1 0— fr< 0 ^Tyzf 
4 4 0 7 HX, M§£MM te£<omt£tLtc&(Dm. (mP, (m+1) P) >£mP t A 
(m+l)PO;frDj|mP+(m+l)P£fT&(/\ ^(2m+l)P^ff-#i-§ 0 ^©177^/4 4 0 
8-4t<„ m\ iD^mP+(m+l)P« N ^^^V y Mtf R ft^ltf^Jli^^joft 
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©t^fi/^4 4 0 9^<o 2{g»2( m p)(^ ^>^yeiRft§ 

5 ^=ryzf4 4 0 8T^fe/c^2mPt^^5/^4 4 0 7 ^2£i6fc,£(2m+ 1 )P£,&© 
|a(2mP, (2m+ 1 )P) £ LT, (mP, (m+ 1 ) P) <Di\t> <9 lc^f§ 0 ^(D&* 

T y -f 4 4 o 4 — M So j& 2 mP, ( 2 m+ 1 ) P. j&mPX tft* (m+ 1 ) Ptei£ 

Tl*JE]£«fc:^T*£;h,TV^5 0 ^7^4 4 1 OtLT, ItiMlfil J: <9 ^ 
$ tb/c^OM (mP, (m+ 1 ) P) fab ,£mP t (m+ 1 ) P(D^n^mP+ (m+ 1 ) P£?f \ 
10 (2m+l)P^m-#i-5o ^©i^f-7 7 , 4 4 11-tr<o £ £ T\ ^mP+ (ra+ 1 ) P 

^4 4 1 ltLT, lt*JSs«t!lJ:!}*§tL^©|a(mP, (m+l )P) frb&(m+ 
l)P(D2^#2((m+l)P)^fr^V\ ^>(2m+2)P^ff#i-§ 0 ^7^4 4 

i 2^t< 0 2^#2((m+i)p)« s ^e-^^v vmn mmMHDMBmmiz 

15 2f*3lcD^£^Tff3f £*L5 0 *Ty?-4 41 2 t Lt s 

4 1 0-C^i6fci^(2ni+l)Pi:^^5,^4 4 1 1 T?*a6fc^ (2m+2)P^^O,m 
((2m+l)P, (2m+2)P)£ Lt N ,&0,m(mP, (m+l) P) <D]Xt> Y) tH«t5 0 ^©^^ 
7y/4 4 0 4^I§ 0 --T% ^(2m+l)P > ,&(2m+2)P. &mPRtf,& (m+l) Pte<£ 
Tttf^gl^V^^tlTV^ ^7^^7°4 4 1 5 UT, iJi|ffl 

20 ft^^^V^T^m^T^^ixfc^OjjsadnP, (m+l)P) KM UT , ^mP&TJ^ 
(m+l)P£-!7-f ^l-v-^ h7Xgf RftlS_h-eT^^ Vffi^-C^^tbTt^^^L., 
^tt^tLmP- (x m ,y m ) ^(m+l)P= (x m+1 ,y m+1 ) t ^ fc&T«#Ii:ih 0 

^t/2^^(D^T-«YilE^I^^^?>»:^-^#^V^^T ; \ tlot^/^\ ^(D 
25 f^7j/7°4 4 13^fi : < () ^7-7^44 1 3i: LT, y^x;^ a f7^| 
Rft^±-e^^T^$iL/c^mP= (x m ,y m ) £ 9 x m £x d £ LT, V W =^JV 
h?*mmPl®M±T~T7^>-mMX^&fttz.,&(ur*l)P= (x m+1 , 

9-Wdit^y hm>m\^< i$b\z.Z:<D\fy h<7>s*?~-^^ffict%:Z)%b, ($1, 
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5r£fcl<fc!>3M+2S£fc5 0 - ZVM\ttm#±<D*kM<Dft&^ S te^PS 

5 ©42^:OtHHra, 3M+ 2 St?fe5 0 7#7~fii:<£) y h^I^OT 5 

fotUf. aTst?* 4 0 7 lZ$5\,^XJjnM<DfYWA, ^Tj'7 t 4408m>T2 

—i$.CO I # g CO fcf >y h ©-fit 2 s 1 -cfcftfi^ 7r^/44 10 (^*5 V ^T#P#<7>fT» 
*s ^T5//44 1 1 }d*5V>X2f^Off^ft^^ ( J r ^§ o t^t)^6M+4 
10 ScDfh^ir^i&S-efcSo V>-r^L©^{CljoV^T% 6M+4 S(Dff-#*^^-e 
fe-5 0 ^T-7^4 4 0 4, 77^^44 0 5, 77^^4406, 7f y7°4 4 
0 7, 77^/4408, ^7S'^4 4 0 9Mft^75'7°4 4 0 4, y^ 
4 4 0 5, ^T5'7°4 4 0 6, 77-^4410, ^TyZfA 411, ^TyZf 

4 4 l 2©«SL<DiHi#:ta, (7*7- ttd©tr 5/ hS) 

15 ^TyfA 4 0 2-e(D2^#(Z)ff^:*^7^-/^ 0 4 4 1 6X<D=£^=£ ?*■ Ug^f R 

^ ^si r mm±<D^ <D&mtm9-WL?t3%m^x*hZ> t , ^nm-nm* ( e 

M+4S) k + 4M-2S+Ii*5, ^^X*kte*JJ7—{g;d(D\fy h&Xfc 
£o — ^xWi-tt, tf-#*Ste, S = 0. 8MSg, f+^»I«, 1=40 Mgg 
20 £:JUSt>b;ft,50T\ ^#:co|+»»{i*5*5j;^ (9. 2k + 4 2. 4) Mi^6 c 

mx-te**?— mcd^s leoifyh (k = i 6 o) -c fetus, _his^iR©7vu=f 

U XA^f+^Ste&joJ:^ 1 5 1 4Mt45„ ^tt"7—m.d(0\fy hfcfc!3©§J- 
WMt L"C«*3J:^:9. 2Mt4S 0 A.Miyaji, T. Ono, H.Cohen, Efficient 
elliptic curve exponentiation using mixed coordinates, Advances in 
25 Cryptology Proceedings of ASIACRYPT' 98, LNCS 1514 (1998) pp. 51-65 fCte, 

n&mmm ^m^^tz.^y —raw- # * * 7 —f&tus 
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= 16 0) T-fc*L«T % wO^*7-fflF?f3f^feOW-J|[*tt*5d3j;^ 1 640Mi 
5 x d + 1 ,x d =lSrttl^i:ST^=fy J.o^T*fctUi\ l&<DT^=tV X 

3ffci»&fh3Hfc© (9. 2k + 42. 4) M^Kllfc^TteS/HC/J^VX, Lfc 

M, S=0. 8Mtfmt, ^(Z5fF«tt^J;^ (9. 2k + 8 7. 2) 
Mtlifc5-^^fl5 0 «^.Wr^7— ' fftd^l 6 0 }fy Y (k = 16 0) 
-efetlHt, ^©^*7^H-lM^H-»ilil 5 5 9Mt/i§ 0 *fRft«i£ 

^Ir77^1ti U-cai^-t-S^tC^t^SfUfMttjSjS.t^- 1 6 4 0M 
(x d ,y d ) §rft^Ltti^i-5%©-efo§ 0 xX^-imRW^^/Ui/^ h 

ftmmmias^T&t&mm-vm z^**? -m&d?= (x d , y d , z d ) ©it© ? 
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(X d + 1 ,Y d+1> Z d + 1 )Oja5*©5*>X d+1 XVZ d + 1 SrfHtrSo 
Srfffc(z:P=(x,y) ^:fe< 0 ill7*7-ffHg82 0 2lt X dN Z d% X d + 1% 

5 z d+1 , x&xfy &mm&n&2o 3 ^j*£z 0 mm&jm 2.03 ittzbtiit. 
mm<omx d . z dN x d+1% z d+1 , xstfyi^^x^ah^^i^Rft 

ii^^tT 7 ^ ^jBgfll-e* $ H/c^ # =7 — fg,&dP= (x d , y d ) (DM*! x d ^ 

y d ©&7c£r?T&5o * # 7 HfctHfclFB l 0 3 1177 >r vJMHcds^TSfe^fcjffi 
£ 6 tbfc ^ # ^ H££ (x d , y d ) SriH* £ L-TjiSTJ^-So 

# 9 — fflFAdP= (X d , Y d , z d ) ©Mtl 9 *>x d SlU«Z d . MMttS £ Hfc^e ^ =f 

^ ySHRti±©^(d+i)p=(x d + 1 ,y d + 1> z d+1 )©si(D5^x d + 1 ^ 
15 Z d + 1% ^7J7— ^ff3S§pi 0 3{cA^^tL/c^ev=f> ySWRftiMLbOjfePSr 

Jffi«^^fctL*:^*7— »/SC(x d ,y d )«rttJ^7i-5 0 ^CT*A^$ttyt^^=r* 

* y m *t r * « ji©^cp© r ^ ^ (x, y) t? % mmm* (x 1 , y i , z 1 ) 

20 ^7J7-f^dP<DT7^^M^^(x d Mon ,y d Mon )-^, *HM«£(X d , 

Y d) Z d )t^il^to yiiRiI±0^(d+l)PO77^i^^ 
(x d + j , y d + ! ) T\ (X d +i,Y d+1) Z d + 1 ) -C^rtL-enifi-o 

^^5/^4 0 0 1 ^joV^TxXZ d ^gf^^tb N Ui?*?T -Ltefaffl&ftZe * 
7^/400 2^4ol^TX d +T ^f^^So C^-eWv^^^TitC^xZd^S 

25 *&^$tLT*5i9. bfc^oTxZ d +X d ^f|-^$tb^o ^©W^^Tafc 
teSffl^ftSo *T-y74 0 0 3{d^3V>TX d -T 1 ^H-#^^ ::t'I/^^ 
TitJ:ttxZ d *St&#ft$tLT^«9, b7t^ 0 -rxZ d -X d ^ff^$n-5o *©3Br**S 
l/v^^T 3 li:«Hlft*tU'5. X^y?4 0 0 4^joV^Tl/v ? ^^T 3 <D2^^ff 

#&*i5 0 -i-eu^^T 3 ii:ttxz d -x d ^»jtt$nTi3 9, bfcasor(x d - 
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{C*3V^TT3XX d+1 ^t^-^$ ^^ So ---e^^^T 3 ^^(X d -xZ d ) 2 ^^ 
T 3 ^m^tl^> 0 *Ty?*4 0 0 6kl:|3I^T2AXZ d ;aSff-Jf i/^^Tj 

5 }e:^^tL5o ^TyzfA o o 7{c:^TT 2 +T ;l /$sfi-J|$;ft / .5 0 

^ ^ T 2 (C«xZ d +X d ^ ^ T ! (cl{12AZ d ^^H^tl^fr^tlTjo 9 v Lfc 

^oTxZ d +X d +2AZ d 75Sff-#$tt5 0 ^©Wi /i ; 7 ^ T2M$il/5o ^ 

^4 0 0 9fc#^TT«+Z d #tt*S;h,5. i;t^^^T 4 tfcX d » 
10 ^tlT*^, Lfc^o-CxX d +Z d ^ff^$tLS 0 lx ^ ^ T 4 

^tLSo 0 1 OtC*3V^T 2 XT 4 ^H-I$n5o 

T 2 ttxZ d +X d +2AZ d *S lx ^ T 4 m ttxX d +Z d ^^CTl^lft £ tiT&i 5 , 
b^^ oT ( xZd+ x d +2AZ d )(xX d +Z d )^fi-^$tL§ 0 -^©^^ix^^T 2 {- 

15 ^Ti^^AZd^lft^tLT^ot?, bfc^ oT 2AZ d 2 ^ff^^ tL§o 

^l/^^T^M^^, ^7-^4 0 1 2f£:^TT 2 -T 1 7mjS£;ft5 0 
£ r T- U ? T 2 f£ (xZ d +X d +2AZ d ) (xX d +Z d ) ^ - - -£ u ^ T 1 iz ^ 
2AZ d 2 £S ^tl^timm cSfrhXio „ Lfc^oT(xZ d +X d +2AZ d ) (xX d +Z d ) - 
2AZ d 2 7)Sff#^tL^ 0 ^^^^l/^^Tsfcl^^tLSo ^fy7°40 13 

20 }-^TT 2 XZ d+1 ^ffJ|£^3o - - X »UVX* T 2 (xZ d +X d + 
2AZ d )(xX d +Z d )-2AZ d 2 ^^^nT*5!9, L.fc^oTZ d+ x ((xZ d +X d + 
2AZ d ) (xX d +Z d ) -2AZ d 2 ) tm % £ ft 3 0 » jjgjjl # 1/ ^ ^ ^ T 2 \Z. £ tl % 0 
^^5/^4 0 1 4tC*5V^T 2 -T 3 *Sfh3f$tL5o ^T'^n 2 iM 
Z d + 1 ((xZ d +X d +2AZ d ) (xX d +Z d )-2AZ d 2 ) ^ ^ T 3 f£«X d + 1 (x d - 

25 xZ d ) 2 ^ ^n^tl^m * *VT *5 <9 % L # 0 -CZ d + x ( (xZ d +X d +2AZ d ) (xX d + 

Z d )-2AZ d 2 )-X d + 1 a d -xZ d ) 2 tm»£tlZ> 0 *<Df&M&l'Vx*T 2 \ZfeM 
£*U5„ XTyJ°4 0 1 5iC*5V<>T2BXyflStf3|£;»T,, Ui/xfT j^m^th 
%o ^f^4 0 1 6}d4oVNTT 1 XZ d ^H-^^^5 o - - Tl/ ^^ TlWj: 
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T 1 \Z.fem£tlZ>o 0 1 7 fC&V^T j XZ d + 1 ^f+|f £;ft5o 

T? V *?x ? T 1 iUi2ByZ d £ flXiS , Lfc#! 0 T2ByZ d Z d + j ^f+» £ 

l A -hmmsnZ> 0 I! T 1/ ^ T ! i^(j:2ByZ d Z d + ! ^fel^tix ^ , Lfc 
5 ^oT2ByZ d Z d + 1 Z d ^fi-^^^5o ^©^^ ^ T- 3 £*L<5 0 * 

Z d + 1 Z d ^^^^x*5t9 N U^l^oT2ByZ d Z d + 1 Z d s^ff^:$tL5 o 
Mft^i/X?T 3 \Zfam£nZ> 0 0 2 O^&^T l-^^T 3 ©f5c 

^ff^^^LSo rrT?l/v ; ^^T3^tt2ByZ d Z d + 1 Z d s^^$ttT*5^, L 
10 fc^oTl/2ByZ d Z d + 1 Z d s/!iSfi-^£;fL5 0 ^©^^ ^ ^ T 3 fr&m £ tL 

<5o 7ry/4 0 2 l{C*5^-CT 2 XT 3 ^H-I$tl5c rrTl/^^T 2 lC 
m d + 1 ((xZ d +X d +2AZ d )(xX d +Z d )-2AZ d 2 )-X d + 2 (X d -xZ d ) 2 ^i/^^T 3 
(^^l^ByZdZd+^ZdS^^^^^fbT^^, L^oT {Z d + 1 ((xZ d + 
X d +2AZ d )(xX d +Z d )-2AZ d 2 )-X d + x (X d -xZ d ) 2 } /2ByZ d Z d + 1 Z d s^f+lf £ti 

15 <5 0 ^(D%£$kfcUi/X?y d lZ.mfo&rLZ> 0 ^TS/74 0 2 2iCjo^TT 1 XX d 
^ff-^^tL^o rr-Cl/^^T i(-fi2ByZ d Z d + 1 ^^^tLT*3!9, Lfcd* 
oT2ByZ d Z d + 1 X d ^fi-^^tL§o ^T©^^ ^ T j $ 4X^ 0 ^ 

5/7°4 0 2 Sf^^TT! XT 3 ^fff^$tL5 0 - - 1* ^ T 1 (Ctt2ByZ d 

Z d + 1 X d ^l/^^T 3 ie:«l/2ByZ d Z d + a Z d sfr^tfh^tifa®) £ frh~C$5 r> v . L 

20 fc^or2ByZ d Z d + 1 X d /2ByZ d Z d + 1 Z d s( = X d /Z d s)^f+^$nS 0 ^(D^M 
^TiM^tl^ ^T-7 7°4 0 2 4iCfc^TT 1 + a^|^g$tl5o i^f 
l^**T i^ttXd/ZdS^^^tLTjo'?, Lyc^oT(X d /Z d s) + a^f+^$ 
^"(D^^x d {c:|&#3$^L^ 0 Lt^ot^^^x d (C:ij;(X d /Z d s) + a© 
ftt^M£*l/ri^ 0 y d ^fi^^^7°4 0 2 1 {C:toVM:{Z d + 1 ((xZ d +X d + 

25 2AZ d )(xX d +Z d )-2AZ d 2 )-X d + x (X d -xZ d ) 2 } /2ByZ d Z d + 1 Z d s&fejfy ^ 

h^MffiRfti&iR:^ ST^-Y >II(x d , y d )^jiI^^T^:7n$ 

Jrte^jili^j; y. x d , z d , x d + 1 , z d + 1 frt>y4^;\s^ 
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ffi^rti[5c$nsa*f4«T©5i k^^ 0 & (d+i)p«,& d pj^p^ojie bfc 

r o, r M o n 2 M o n 3 , . M o n 2 , M o n . 9 q o 

5 B Yd ~x d +Ax d +x d Mo n ^.tf?By 2 = x 3 +Ax 2 +x^^fc-f- 0 Sfc 3 

y^°-{( X Mon x+l)(x Mon +x+2A) _ 2A _ (x Mo„_ x)2xd + i}/(2B ^ . ^ ? fi 

£r#5o '^t'x d Mon =X d /Z d% x d + 1 =X d+1 /Z d+1 T-fct9. rCD^&ft 

10 y^° n ={Z d + 1 ((X d x + Z d )(X d+ xZ d+ 2AZ d )-2Azi)-(x d -xZ d ) 2 X d + 1 }/ 
(2ByZ d Z d + 1 Z d ) -S7 7 

x d Mo n =X d /Z d 5 &7G&#©|El$fc£M S't@^y d Mon (D^-S t 
x^ on =(2ByZ d Z d + 1 X d )/(2ByZ d Z d+1 Z d ) -^7 8 

(OMfcmmz^Xfe, K.0keya, H. Kurumatani, K. Sakurai, Elliptic Curves 
with the Montgomery-Form an d Their Cryptographic Applications, Public 
Key Cryptography, LNCS 1751 (2000) pp. 238-257 fcS2*ft£*W5 0 *-;h,i£«fc 
Z>t, ^^HaiLT, yd=s- 1 y d Mon S^ d =s- 1 x d Mon + a © 
20 i#i^5o lt!tUf7 9, t8 0^#5 o 

y d = {Z d + 1 ((X d x+Z d )(X d +xZ d +2AZ d )-2Azf)-(X d -xZ d ) 2 X d+1 }/(2sByZ d Z d + 1 Z d ) 

—Wil 9 

x d =((2ByZ d Z d + 1 X d )/(2sByZ d Z d+1 Z d )) + Q: ~.&8 0 

x d ,y d «El4 0 £.*)5-x.b*lZ> 0 LfctfSoT, V^^-jV^y^y^^ 

±12^111^^^5/^4 0 0 1, 7x^4 00 5, 77-7 7"400 6, 
^4 0 0 8. 0 0 1 l^f^4 0 1 3,7r j/ 

0 1 5, ^7y/4 0 1 6 N ^^^7°4 0 1 7, 0 18, 
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^4019, ^T^y'A 0 2 1, 7fy/4 0 2 2 Rtf^TvZf 4 0 2 3}£*^ 
X^mi*±<Dm&<DnWm$:>&mbi-Z)o £fc, ^xs>:7*4 0 0 4^:^X^5 
f*±(D2^#(Ofh#ft^^i:i-So ^^^7°4 0 2 0(31*5V>-C^r|5Sf*_b 

?r S^tK^TPS^_h(D^7u^(Dtf-#4§r I tt5t, _hfB#Ji!Ite 15M+S+I 

M^{^^7 7— m.d& 1 6 0 h-efe;ft,te\ mm**?— miw<vnw 

10 ittjojoj;-^ 1 5 0 OMiit ji,^ ^tL^o S=0. 8M, I=4 0Mitet 
£ ^JlS^TuOft^*^ 5 5 . 8MTfc «9 v "7— mfW(DfiMAt J£-< 

=fc 9 v ^^5/7°4 0 0 6 7^3:^ ^X 4 0 15 S^Off#*^^^ 

fftd&IJ^-frc/Pv^ h77liRft§±©»f„ X d , Z d , 
20 X d + 1 , Z d + 1 ^{±J^i-Sffi^^7--^S : ff^f|3^S^oV^T|fePJi-§ 0 

Jg2 0^»!jcD^3i^^7-f^ff#f(5 2 0 2 ©flB3g^* 5 H&tf-J* 
^ft^tt, H9^Jfe^J^ii55S^^7— ffiFffm^fe (I8#i) £ffi^5 0 CtL 
(dJ;!9 N ^^7^— ffidRt5!7^3i^'>3. Y7*mffin&M±<D&Pfrb, X d) Z d , 
X d + 1 , Z d + 1 ?rt±l^i-ST^=fy XJ*t LT, illT*&57;U=?!JX^j5^ 
25 £;ft5 0 ft, iS^^ — -f^ft-^152 0 2}^*5V>TJifST^^y XA^§^&< 
Tt>, ^^-IBd.&tKy-f^/Uv^ h^^M^Rft^_b^^P^fe, X d , Z d , 

;*#7-f£ffJf£fli 0 3ie:jottS^m7c^2 0 3 oMSH7c^^^f+m* 
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n 1 5M+ S + I X& 9 „ ^flteM&* % 7 2 0 2 (DMiM^X 

&&te&9tfttfr&*<D (9. 2k-3. 6) Mi:^J±;^TW:5^/h$V\ Lfc 

7—fe^r%n<Dl^*$)7— tifflrU\c.>%mt£tirM.-m.b m£mmxhZ> 0 1=40 

5 S = 0. 8Mt^t5t % ^COf+JtittjojoJ;^ (9. 2k + 52. 2) 

Mil^5ri:^t*t5 0 MZ-t£x*!9~ ftd^i 6 0 !f y V (k=16 0) 
T&ftl*, f&fffJtfciifrSfc*W*tt 1 5 2 4Mir&5 0 ^tRft^t 

10 &&77 4^&9kVTmiJT&tt}Z^kl£&ftnm&3S3oJ:Z:l 6 4 OM 

0 2 j&S-tft&gttJRSo i*5Si*:&7 — f^ff^f|3 2 0 2fi^ij-giofc^#^ — jfid 
20 ^^ft/c^-f^Uv-^, h^^^Rft^jKD^P^b^^^V PSffiBii 
ld*5l ^Tttj^M^T'^ $ tlfc^ # 7 — (SF^C d P= (X d , Y d , Z d ) C0ffi^(D 9 *>X d ^:D« 
Z d , ftf^ST^^n/c^^V yMtfRMLL<^ d ( d + 1 )P=(X d + 1 , 
Y d + 1 ,Z d + 1 )©Jffi*R©5t>X d + 1 XTJ«Z d+1 SrfH|:i-S. £fc, A^£tLfc!7 

P=(x,y) £*5< 0 iiSjS^^^— ffiPW-3|L«U2 0 2te, X d , Z d , X d + 1 , Z d + 1> x 
2tU<y&-J&«&7ng|S 2 0 3 t4i5 0 Jffi^TnlFP 2 0 3 b*l7bMH<DlttX d , 

Z d , X d + 1 , Z d + 1 , xMi D !7>T3i/W> a h7^S«Rftj|ftt*5V^^ 

H»/RdP- (x d w , y d w , z d w ) <omm d w , y d w &tM d w © 
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M4 1ia?), mix, y, X d , Z d , X d + 1 , Z d + 1 a^*fcH;/t4&£-fc: 
X d ™ Y d W N Z d W $^^±J^i-5MI«7£^C^)^a^OV^Tfj£§gi-6o 

5 MtMTn^ 2 0 3 xit, ^>-=*> y i^r ft«ftfcdsv^-clt«jffi«-e«*ixfc^ 
ts y HSF/£dP= (X d , Y d , z d ) ©II© 5 t»x d RT$Z d , JN-JBJffi*-e* £ tWL^E- > =r 

^ y®«n*iftJio^(d+i)p=(x d+1 .y d+1 ,z d+1 )©ffiai©5 t>x d+1 xt5 
io &m±^M&mm&^xft&£m.m&j*z. htitc^^^ ~-m& <x d w , y d w , 

(x d ,y d )T% ltf^M«^(X dJ Y d ,Z d )-e^n^H^i- 0 ^E-V^ ySfllRtfjjftJ: 
15 ©^(d+l)P©77^yIg|r(x d + 1) y d + 1 )t % ttiMI£(X d + 1 ,Y d + 1 , 

z d+1 )-e^n^tL*i- 0 

^Ty^4 1 0 1 JC*5^TxXZ d ^frf-»£;^ ^^^T^M^tL-So J* 
TV74 1 0 2^*5V^TX d + T 1 }&Sf|-3f$tL5 0 rrt^^TjtfMd^ 

20 *Wrt**i5o ^-yzfA i o 3}e:ioV^TX d -T i^sff^^^ 

^^T 3 ttt$n§o ^ 5/7*4 1 0 4(C*5V^Tl^v ? 7.^T 3 ©2^Sff- 
Jf£;ft3o ZZXUisXfT 3 ia*xZ d -X d i>ife#i£ti,X*5Q , Lfc^ 0 -c(X d - 
xZ d ) 2 ^ft-^^^^ o ^r©jBf*^^^^T 3 t2:|Mfi**bSo ^fy^ios 

25 (^^TT 3 XX d + 1 ^f+^$tL6 0 CiT-W^^T 3 ^»i(X d -xZ d ) 2 

&*LT*5?) % Lfc/5SoTX d + 1 (X d -xZ d ) 2 ^f+^^tL^ 0 -tOJSS^^^^r 
T 3 (d^$tL6o ^Ty^A 1 0 6td*5V>T2AXZ d ^ff-^^^ l/^^Tj 
tM$ll5o XTy?4 1 0 7lC*5V>TT 2 +T 1 ^fj-^$^ /So ---ei-v? 
^ ^ T 2 (C^xZ d +X d # t31^2AZ d ^ Jtn-^mfcW * nt*3 5 , Lfc 
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a s oTxZ d +X d +2AZ d #W-3*£;h,3. ^(DfaMtf # T 2 £;JV5. * 

^5/^4 1 0 8|C*3V^xXX d ^fHj[$tb, i/^^T 4 fcft#i$n5. 

^4 1 0 9fc*SVNTT 4 +Z d 3aSfH|t*tL6 0 -^"T?V^^T 4 R:r±xX d aiS«H|ft 

5 $|15 0 1 1 0m^T 2 XT 4 ^|ff $^5o ^--e^^ 

T 2 dtexZ d +X d +2AZ d 3* * T 4 iatxX d +Z d #*ft-e*L*S*l $ ilt^ t> , 

L fc ^ o X (xZ d +X d +2AZ d ) (xX d +Z d ) ^ff # £ *t3 o * 1/ ? T 2 ^ 

1 1 1 tfev^T ! xz d #fH$ii5 0 
^T 1 Rltt2AZ d iS»jtt*tLTfe!3, Lfc^ 0 X2AZ d 2 j&Sff-J* $ tl5 „ 
10 dS^^^TiJCftjJft^nSc XTy?4 1 1 2tC*5V^T 2 -T 1 ^3f*ttS 0 

r -^^^^^T 2 i^«( x z d +x d +2Az d )(xX d +z d )^r r-ei-^^T^cfi 

2AZ d 2 j&S ^fh^K^m $ tLT*5 t) . bfc ^ o T (xZ d +X d +2AZ d ) (xX d +Z d ) - 
2AZ d 2 ^fHP£;ft,3 0 ^(D&m$^X?T 2 fcfcm£tlZ> 0 77^^4 1 1 3 

fc*5v>-cT 2 xz d + 1 *sti^[$ns. ---e^^^T 2 n:wt(xz d +x d + 

15 2AZ d )(xX d +Z d )-2AZ d 2 frfeffigtlXteV ^ L/c^oTZ d + j ((xZ d +X d + 

2AZ d ) (xX d +Z d ) -2AZ d 2 ) H $jrW £ § o ^©fej|iJl/i?^^T 2 tC«K|ft $ ft § 0 
* 7^:7° 4 1 1 4{£j3^XT 2 -T 3 tfSff3l£ft3 0 i^^^T 2 fctt 
Z d + 1 ((xZ d +X d +2AZ d ) (xX d +Z d )-2AZ d 2 ) ^ ^ T 3 ^«X d + 2 (X d - 

xZ d ) 2 tf^ft^ft&$3 $ *3 5 % b fc £S o TZ d + 2 ( ( xZ d +X d +2AZ d ) (xX d + 

20 Z d )-2AZ d 2 )-X d + 1 (X d -xZ d ) 2 ^|+JfL$ft5 0 t<Dm^Uiy^^Y d W ^m 

£*i3 0 *^-yy4 1 1 5^£>^x2Bxya$ff-j?£ft > ^^Tit^^n 

5o 1 1 efcLfcVvTTi xz d istm$ix5o r. r T* 1/ * T j iZfc 

2By^4Mft$nT*5 9, L*:^oT2ByZ d astH|[*H« 0 ^©iKMWSW*;** 
TjtCfe^^tbSo ^^^^°4 1 1 TiCdoV^XT! XZ d + 1 ^Sff^$^§ o ~~ 
25 t^^T! ICfiKByZ d $ ftT *3 ?K bfc^ o X 2ByZ d Z d + x j&Sff £ £ 

ft£ 0 ^"©ltm^l-v ; ^^T 1 fc^^ns o ^4 1 1 SKlfc^XTiX 

Z d 3$fH££ft5 0 i^l/^^T! fclte2ByZ d Z d + x j>$fe@1 tS ftT*5 V) N Lfc 
^oT2ByZ d Z d + 1 Z d ^fHt^n5, V^* ^ T 3 fctetfj £ft£> 0 * 

Ty?4 1 1 9Ki:fc^TT3Xsasff2f£;ft,5o ^rx^^^T 3 ttt 
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2ByZ d Z d + 1 Z d j&M&*ft£;fr/C:i3*K b/c^oT2ByZ d Z d+ 1 Z d s^ttM & tl Z> o 

W+M&ftsZo :rf^7^T ! ^«2ByZ d Z d + 1 ^^^tlT*5 9 % Lfc^o 
T2ByZ d Z d + 1 X d ^ft-|f £;ft,3o ^Og^l/^^TjCM^S, 
5 7"4 1 2 1 (Cjo^TZ d W X a^fff - - T * ^ z d w ^« 2 ByZ d 

Z d + 1 Z d s^fe#rt$tLT*5?), Lfc^ 0 -C2ByZ d Z d + 1 Z dSQ: ^ft^$tL5o t 
(D&M&T 3 KHWft$nSo XTy74 1 2 2{C*5VvTT 1 +T 3 ^ff.^^tb6o 
rCl?^^^^T 1 (C« 2 ByZ d Z d+1 X d 7)Sl/^^T3}3:tt2ByZ d Z d + 1 Z d SQ ! ^ 
•t tL ^n«r*ft $ tLT*3 t) , UfctfS o "C2ByZ d Z d + ! X d +2ByZ d Z d + 1 Z d sa^ f+jf 
10 £*i,5 0 -?:OM^x d w (c:|&^^n-5o Lfc^oT^v^^Xd^f^ByZd 

Z d + 1 X d +2ByZ d Z d+1 Z d sa<D^tfM£tt£*LTV^ 0 Y d w JdH:^^- y ^4 1 1 
4^^:joV^TZ d + 1 ((xZ d +X d +2AZ d ) (xX d +Z d )-2AZ d 2 )-X d + 2 (X d -xZ d ) 2 

tfftSft. ; e©&3E^asfrftfc>*ifcv^T% ^©fW^tv^. z d w ^te 
^^-/^4 l l 9fc:fc^T2ByZ d Z d + 1 z d stfM&fa£;h,x ^©^JE3rj&sfrfc:fc>*L 

r fti&tcjs it zmmm a d w , y d w , z d w ) ©-ma^r «5£ v % § e 

Jbis^iil^ct «?#^^nfcx N y s x d> z d> x d + 1 , Zd + ^^y-r^/u-^^ 

h 7 R ffii^(c:*5 ft § * # 7 -ffiFjfe©*t»Jffi« (X d W , Y d W , Z d W ) it % 

Sfc6£#5 0 M^dP(j:^y=f^ yiHRfti±©,fetfe5©T\ By d 2 = 
x d 3 +Ax d 2 +x d ^t/By 2 =x 3 +Ax 2 +x^^fci- 0 t6|l|UU By d 2 &t>*By 2 £ 
?B*U i: s i6 4^^#5 0 :itx d =X d /Z d , * d + 1 = 

x d + 1 /z d + 1 -c-fe(9 N ^©i^Atsciia <9$iBmm<vm^tmwL-tz> 

25 t6 5!f#5 0 x d =X d /Z d t?fe5dS % i£5nfc#©|El#8:«e>'*-B y d 

Y d =Z d+1 [(X d +xZ d +2AZ d ) (X d x+Z d )-2AZ§ : ]-(X d -xZ d ) 2 X d + 1 ---gfc8 1 
£ U 

X d =2ByZ d Z d + 1 X d 8 2 
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Z d =2ByZ d Z d+1 Z d -f 8 3 
k-tZkW d ,Y* d ,z* d ) = CX d ,Y d ,Z d )£fc5 0 y®*Rtt«Lh0>jfci: 
!7vr^^ h^^MtfR*a_h^^i:O^M#^o^T« N K. Okeya, 
H. Kurumatani, K. Sakurai, Elliptic Curves with the Montgomery-Form and 
5 Their Cryptographic Applications, Public Key Cryptography, LNCS 1751 

(2000) pp.238-257 |CSB*£$*IT^5 0 •£r*Uc:«fc 5 fl^7^^saa 

^ Y d w =r d , x d w =x' d +<*z d w , &m d w =sz' d b^*>mm&&z> 0 m&t 

Yd=Z d+1 [(X d +xZ d +2AZ d ) (X d x+Z d )-2Azi]-(X d -xZ d ) 2 X d + 1 -ftS 4 
10 X3=2ByZ d Z d + 1 X d + aZ3 -f8 5 

Z^=2sByZ d Z d+1 Z d -ifcS 6 

teJ:3X*H-*Ltf.fcv\, r^t% x d w , Y d w , z/fii4 l J: 9 6, 

*LTV^ 0 Uc^ot, P^/Wol K7^S«Riftj»|i:*3tt5ltM* 
(x d w , y d w , z d w ) ©{tt^-cmjn StiTV^ittufts, 
15 _bfe^JH«^^5'^ 0 4 101, 105, 106, ^^-y 

^4 10 8, ^^5/^4 110, ^yZ?A 111, ^Ty7'4 113, y 
^4 115, ^y-yy*A 116, ^^5/^4 117, ^T5//4 118, 5/ 
^4 1 1 9, ^Tyy^A 1 2 0Sl>^Tj//4 12 1 \Z.&\^^mfc±.<Ofk%<T> 

20 *«rie^t-f 5. mm^±.<Diim-RuwL%(D^%-mi, mmw-±(Dmm.mmm, 

5f *£rM, ^-(5S^_bO 2 ^»Off S <b -f^ £ , _fc!2«f ?2 14M+S (59ft 

m7tU*3)=7— 16 0 Ify h-e$>H«\ ^^77- f^f+^<Df+»*{i*5 

25 ^£-^1 5 0 OM§iiJM^£>tL5o S = 0. 8 M^^S iM^7c(Dff®: 

ffi* ±mmmtbtf:<xh. -ttatmc^tcj; <9-#^e>^7tx d w , Y d w , 

Z d W ©^ft-^ T ^^X d W , Y d W , Z d W <D«S^ 1?#So 57^^ 
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U d w ,y d w )birZ>t, x d w , y d w ^_hf S f+3f5£(:: J; t> bftSiitSrlfrS X 5 
^X d w , Y d w . Z d W <Dffi£itiKU *©|fcmjrr*ftriX d w , Y d w , Z d W ^ 

ffiRftli^o^^^^^ ^s^t^/h$ < i^iilcj;^ ^^^^°4 10 6, 

^^—{gd&U^-fzc^v^ b7^M*fR«Jr(D^P^b, X d , Z d , 

x d + 1 , z d + 1 £ffi;W3T7i^y XAj;iov^f#0Ji-§ o 

7^x;^> a h7«Rfti±©^^, X d , Z d , X d+1 , Z d + 1 ^|±}^-r 

h^^M#Rft^_b©^p^fe, x d , z d , x d + 1 , z d + 1 ^ai^Ji- 

xxv—mtw^ 103 t!i*5»tsffiaia5nifp 203 <omm&7i;fc&mtettm* 

ni 4M+Sffct), ^tbf«5S^^7^— fgff-^£|$2 0 2 0S3^*7-fl+I 
tdi^S*tH|L*<0 (9. 2k-3. 6) MfctHifc^-CfiSd^/h^V^ bfc^o 

mn^u<DMT&*#7—mnm£&m%:nw&kmgmmT«hz> 0 s = o. sm 

<hiS^i-5<b, r (Df+^Ettjo*5 J:^- (9. 2k + ii. 2) Mt^mh&^b 

^T*#6o 09 7 HItdj&S 16 0 t> b (k = 1 6 0) -Cfcftf£ x ^<D^ 
tit bTtti^i-S4B^^S^^S^*tt*5*3j:^rl 6 OOMtfc^ rftt 
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jg2 2mmMt±Amtim<Dtfm$iMb it!7^x/^ a h^^mmmmM^, 

(x d W ,y d W )^:ff»Llii^i-?)o 7— HM.d%.W 4 ^j^i/^ h^glf&Rft 

as-t*i«rSl*&3 0 i«I^*7- ffff-#g|5 2 0 2 teg ^ ^ o 7t ^ tj ^ — ft d £ # 
x.£>;ft,7c!7^zc,i^>^ h7Xfi Hti±©^^yd7 yMtfRftH^*3 

-y >-J£iTt $ tWh^e >^y» ft&_h© jfe (d+i) p= (x d + 1 , y d + 1 ) <z>M 

*j»j:©jSR= (x, y) tm^^mm^mmmytm 203 m-^*.*. jm^-tg^ 2 

0 3»#xibiX7cMM(Df(:x dN x d + ls xSTJtyJk 9 V 4 =z-flsZ/ =*. h ^^MffiR 
15 Aftd *SV ^77^ £ *L7t J* 7J 7 -f^^dP= (x d W , y d W ) ©liy d w 

X ^ ^MH^&v ^ tb/c^ 7^ 7— ( Xd w ; yd w } ^ f+ ^ 

4 2{C£!9. MUx, y x x d , n A + 1 ^k.hntcM^. x d ™ y d W 

rn.wm.7tu2 0 yM+fR«^vNTT^^>M^T^$^ 

7t^7J7— f^dP=(x d ,y d )(DMtl<77 5 ^x d% 77^ ^^1^^ tLfe^E^^ 
* yitlRM±©^(d+l)P=(x d + 1) y d + 1 )©gi©5* )Xd + 1> ^77 7- 

^t+nian 0 3^A^$tL7t^^rf> yMttRfta_b^^;psrT7>f >mm-em 

25 U7c(x,y)^A7t/b, ^T^MI^T 7 ^ >"Mt!fe::£^T5^&mi#^;i btL 

yt^777-^(x d W ,y d W )^tt}7t|-rSo 

^X5/^4 2 0 l(d*5V^Tx d Xx7)Sff^$^ Ui?X&T ± lZ.$t$fa£frL& 0 * 
7^:7° 4 2 0 2iC*3V^T 1 +l^fHP$tbSo C n "C Uv^ ^ T x ^«x d x^^- 

m&nx&v^ L7b^oTx d x+i^ff»^n§ 0 ^©te^^^TjiM 
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So *7"yzf4 2 0 4tCi3V^rT 2 +2A35SfH|[$nSo ::t'^^T 2 !ott 
x d +x*s»j|A$jXT*3 5, LfcflSoTx d +x+2A)&S|1-Jf£*LSo 1/ 
^T 2 W^n^ 0 ^7 5//4 2 0 sm^Ti XT 2 ^!ff $ll5o - ^ 
5 -C U i? * ? T 1 fix d x+l 1/ v? ^ ^ T 2 fix d +X+2A tf* *ft $ tl X *3 

«9, bfc^oT(x d x+l) (x d +x+2A)^ff-3t$tL§ o ^©JgJftdS U^^r T 2 »C» 
lrt$tU§ 0 ^77^4 2 0 6 t*5^TT r 2A#fH$n5 0 rCT^^ 
T 1 ttt(x d x+1) (x d +x+2A)AS*Mft$nT*3«3, l^ot(x d x+l) (x d +x+2A)- 
2A^ff#$^L6 0 ^©Sf^V^^Titfeft^tLSo ^fy74 2 0 7|:*5 
10 VNTx d -x/5Sf+^$rt. l^** T 2 *L<5 0 ^s/^ 2 0 8 fc*5^T 

$SoT(x d -x) 2 ^th#$^§ 0 ^©It^S I/^^Ta tcte*ft£;ft,5 0 

y°4 2 o 9K:^tt 2 xx d + 1 dsw-3([$ti,5o r ^T-^^t 2 u:fi(x d -. 
x) 2 75S^^tu-r*5t9 , bfc^ 0 -c(x d -x) 2 x d + 1 ^if-|f £ti3 0 ^rOSfg^j&s 
15 l/^^T 2 («^n5 0 ^fy/4 2. 1.0I^V^TT 1 -T 2 ^ff-i^Ji?, o 
r^X'I/^^Tj &Ui(x d x+l) (x d +x+2A)-2A^W>?^^T 2 ^«(x d -x) 2 
x d + 1 dS-ttl/^tL*S-ifrt$iXT*3t), tfc^oT(x d x+l) (x d +x+2A)-2A-(x d - 
x) 2 x d + 1 dmWgfl& 0 ^^WL-^^Ti^^iaS, ^77^4 2 
1 1 (£*5V^2BXy;&$ff-^£;ft, N U^Ti ^ T 2 djfrft $ *l5 e ^7^742 1 2 

9, bfc*SoTl/2By^K-3¥$tL5o ^©»l/^^T 2 M^il§ 0 ^ 
7^^421 3i^V^TT 1 XT 2 ^|fI^tl5„ ::t^^T 1 Wt 
(x d x+l) (x d +x+2A)-2A-(x d -x) 2 x d + j ^ ^s?* ^ T g \z.m/2By^^tl^ffl^ 
^tLT&O , Lfc^oT{(x d x+l) (x d +x+2A)-2A-(x d -x) 2 x d + a }/2BydSf+ 
25 Jt£H3 0 ^©jBfJft^SU^^TiKl^iift^nSo ^75'/4 2 14m^ 
T ! X (1/s) £ tl S o rrt'V^^T 1 pj:{(x d x+l)(x (1 +x+2A) -2A- (x d 

-x) 2 x d + 1 }/2By^^^^ttT*5i5 N Lfc T { (x d x+l) (x d +x+2A)-2A-(x d 
-x) 2 x d + 1 }/2Bys^if#£*L5 0 j&S ^v ? ^^y d W (d^^n-5o ^7^ 

^4 2 1 5^:fcl^Tx d X(l/s)^fr^£*K US?;** T x KHftW^tbS,, 
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^y d W «^^2'7 D 4 2 1 4{d^NT{(x d x+l) (x d +x+2A)-2A-(x d -x) 2 

R ft«Ji©^-C«> S <D X\ By d 2 =x d 3 +Ax d 2 +x d & tfBy 2 =x 3 +Ax 2 +x i~ a 
10 letftAL, By d 2 &tFBy 2 £M5!lU sSSrSS-fa f6 4^ 0 

o^Tte:, K. Okeya, H. Kurumatani, K. Sakurai, Elliptic Curves with the 
Montgomery-Form and Their Cryptographic Applications, Public Key 
Cryptography, LNCS 1751 (2000) pp. 238-257 ^fEite£*vrv^ 0 Z:ti\ZL£Z>k, 
15 ^7^ts,«at, yd W =s- 1 y d S:t>x d W =s- 1 x d + a©i8#^ feSo 

y^={(x dX + 1 ) (x d +x+2A)-2A-(x d -x) 2 x d + 1 }/(2sBy) ■■■^8 7 



(x d w > y d w ) ©fit tt^rmTc ^t^5rtc^, 



±IE?lili^fy/4 2 0 1 N ^7^4 2 0 5, 77^/4 2 0 9, ^ y 
-?4 2 1 1 „ ^7^/4213, ^7^4 2 1 4M7f«7/4 2 1 5 f^fel^ 

s . mmi*±(Dm7uWiW.(Dnwm& it-rst. ±mmm% 7 m+ s + 1 <d^% 
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dSj:-tl 5 0 0ymt%MhbtlZ) o S = 0. 8MMl=4 0M^ff6t 

M««7c©tnf»*4 7. 8M-efcti, asst.* #7— ffftmtotms^jt^-ctt 

^s<D{fi:£/h£ < £3^i:&c:J:9, 7fj'/4 2.0 6, 7x^7*4 211, 7^ 
^^4 2 1 4Mft7T5'^4 2 1 5 {djotf 53*3|£©tH|LjlS:S!lifrf S - £ 

KiS^ 7J 9 — «tm*P 2 0 2 7 # 7 -HSFtm^l 0 3 tA^J £ tLfc 57 ^ 3i 

ii(^^T77 ^jS^St?* $ ftfc77J 7 — {&.&dP= (x dl y d )0Hx d , 77 

is -y yiits $ tbfc^e>- =f^y mm r ftn-_h©^ (d+i) p=(x d+1 ,y d + 1 )©H 

SrttA-fSo ^ry^4 5 0 2i LT N ^P<D2fgf^2P$rfHli-So 
20 ^PW:|*J^a5*^*5V>-C(x, y,l) £ tT*L, ^>-=fy: y MttR fti©jjfMK 
&C*5tf5 2fflF3¥©^r^;SrffiV^2ffif^2P«rfj-3¥'t-S„ ^7j/7°4 5 0 3 t LT, 
^*7- ffiFtHMBl 0 3 ^A^J$n/c+fRft|^±(^^Pi:^^iy7 0 4 5 0 2T*^ 
#>7t,£2P£r N (P, 2P) t LTMt5„ w^-C^PXt^^PttJJtJ^ffiW-e* 

£*LTV^ 0 77s/7°4 5 04tLT, g£$^ £*#7— f£d<£tfy hStas— 
25 Srt-536^5* a Sr*J^U — St^tU**-^:^ 5 1 5~4t< 0 -SUiimtf 
7rs'7 o 4 5 0 5^T<„ 7^>7°4 5 0 5 t LT, I 3r 1 JftbD ^^:5o * 

fy^4 5 0 6 t UT, ^#7 — -fit© I #SObTjy b ^fi^ o "Cfe5^ 1 
*»4rW3frt-5o b<^«$0^fo;ft$i7^7^4 5 0 7-4r < G ^£>^7 

h©f^lt'tol^777'4 5 1 0^|f<o ^77^4 5 0 7 £ 
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«t r> m £ 1ntc&(Dffl. (mP, On+l) P) fa b &mP t & (m+1) P©;tjQ||mP+ (ra+1) PSrfTfc 
V\ ^(2m+l)P^rff-#-t-5 0 ^©|^r^4 5 0 8^< 0 ^JD# 
mP+(m+l)Pte N ^EV=f* y^t»Rfta^lt^M^{C*5tt-5J!JP^^ffiV^-Cf+» 
^Ty/4 5 08^U, W^^^Jltp^^Hfe^^lKmP, ( m +l)P) 
5 ^b^mP© 2 {£3f2(mP) \ ^2mP^f-|-|J-r -5 0 tO|^f^4 5 0 9^ 

tr< 0 rc-c\ 2f^#2(mP){^ vMttft&mvm&jmmfc&vz 2& 

^©^5t£rJ^-C|fJf£ti5o ^ry/4509tbt, ^fy/45 0 8T'* 
a&fcj£2mP£: X^r y ^4 5 0 7 T^bbtcj& (2m+ 1 )P£r (2mP, (2m+ 1 )P) h L 
,&©|i..(mP, (m+l)P)©ftt>«9 K#K!fr*-5. ^r©^:*^ y :/4 5 0 4— M^> 0 
10 ^ wT\ ,&2mP, /&(2m+l)P, ^mPSrJ«A(m+l)Ptt^TltJ^j^«fr*3VNT^$tbT 
v^S„ **rv?4 5l0t LT. lt»M«K:J:?)**tL*:jfe©ja(iiiP J (m+l)p) 

^b^nP^^(m+l)P©^JpmP+(m+l)PSrtTJfcV\ (2m+l) P^ff^i";*,, 
TVfA 5 1 1-4t< 0 -i-C. JDlfniP+On+DPti, *zZsdt?. yMWRft^Oft 
J^J@l«t2:*5tt5An3?^:SrffiVN-ctf38L$nSo 7f?/4 5iii UT/lt*jffi 
15 «$C J: 89 ^ $ *L7c,&©m(mP, (ra+ 1 ) P) fab M. ( m + 1 ) P<D 2 {§»2 ( (m+ 1 ) P) ^=ffjfe 
V\ ^(2m+2)P?rff-#i-§ 0 W^f5/^4 5'12^< 0 2 <fg» 

ff^£*L5o 7f 5 '^45 12tU, ^T-7^4 5 1 0T*tfefc^(2m+l)Pi 
5 11 T^i?)fc^(2m+2)P5r^(D / m((2m+ 1 )P, (2m+2)P) t tt, A© 
20 la(mP, (m+l) PcDftfr >9 I^if5 0 -^©^x :7°4 5 0 4— M5„ ^^T% 

(2m+l)P % ^(2m+2)P, ^mPSt^^(^n+l)P^TJ|^^^^^:*5V^T«^^TV^ 0 
^^4 5 154tT, ^ffi«T^$^fc^mP=(X m , Y m> Z m ) «fc ij X m ^t>*Z m 

z m+1 )j;i9X m+1 stKz m+1 ^^mx d + 1 st;z d + 1 tt5 0 irt, Y m 

^TiiYjffiS&^i&S^PaS^^©^ t*oTV^V\ x d , z d , x d+1 , 
Z d + i^^ x d =X d Z d + 1 /Z d Z d + 1 , x d + 1 =Z d X d + 1 /Z d Z d + 1 i: LTx d , 
Xd + i&^&So t©t7ry/4 5 13^< 0 ^ry^4 5 1 3ilT, 
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wttC«fci93M+2Si:^S 0 T?M«#|^±©3fc£©W-3l* N S teffifr 

45r5fc©£HSftfii % 3 M+ 2 S T'feSo ^Htt© I # g © If 5/ h (Dim* 0 "Cfe 
tU2\ ^•'7^^7 0 4 5 0 7 (CdoV>T*P^(7)i+^:* N 7f5'7'4 5 0 8|C*5V^2i ; 
ifOffUlEij^iKJgtJ&So 6 M+ 4 SCOH-^ft^^ir^So 7 77 7^ 

ffl[©I#B©lfy h^lt^lT'feixil 5 1 Oiz.$$\,^TlmM<DwYWA, 

5 1 Ui:*5V^2flFj|[©fH|[*^55i:*«o Wfe6M+4 S<7> 

^7^4 5 0 4, ^f^7°4 5 0 5, ^.^^7°4 5 0 6. ^7^4 5 0 7, 
77^/4 5 0 8, 775/^4 5 0 9M!^7^7°4 5 0 4, 77 5/7*4 5 0 
5, ^77^4 5 0 6, 7r^7°4 5 10. ^7y^4 5 11. ^TiyZfA 5 1 
2©Hk?)igU©IgH!tW:, (^*7- ffidOtf y hS) - 1 E^ftS©-?, 7^ 
^4 5 0 2t 5 ©2^^Ofh^4^.rj?7^5,^ 0 4 5 1 5"(;-©77^Vli^It 
OtHf*Sr#ltJ!:AiX5 £ . <£f*©frlf ftf2 ( 6 M+ 4 S ) k + 3 M- 2 S + I 

S = 0. 8Mif, frlTft I ttl =4 0Mf£^£JMtt>b;ft5<Z>-C\ ^f*(Dff^ 
itt*5*5«t^ (9. 2 k + 4 1. 4) Mi^§ 0 M7tt£x$7— fedffi 1 6 0 fcf 
y h (k = 16 0) t?fcn^ ±fS#JllI<DT/V^y X^(Df+^*«*3joJ:^ 1 5 
1 3M<b&5o *#7 — figd<Dlfy hi>;fc9©ff-3Mfc£ LTKMsj;*: 9 . 2Mi 
&<5 0 A. Miyaji, T. Ono, H.Cohen, Efficient elliptic curve exponentiation 
using mixed coordinates, Advances in Cryptology Proceedings of 
ASIACRYPT' 98, LNCS 1514 (1998) pp. 51-65 t£f3 N U^^jV^zl. h7 7lHRi 

Wc7 7J 7? — {gff J^&tei^jgft;* # 7 —miWJjW: t LTta«t$tbT^So C 
—im&l 6 0 try h (k= 1 6 0) C(D^^7-W*)feOt|-|E 
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7— 103 m43ftaffi««7cSiJ 203 ©M««7ctciie5,s^tf#* 
7M+ s + 1 x& v) . ^ftuwmxz7-mmn 202 <Dmmxz ?-im 

mz&mtewYMAv (9. 2k + 4l. 4) M£R:j£^Tte575^/h£v\, bfc 

10 ^ oT> 7 1 o 3<d**7-< imm^&w?mw-Ate s mm** 
7— &9YWM<DMmx% mwtmzi&mtenw-Sib m$mmx&z> 0 1 = 4 0 

M, S = 0. 8Mtf^f5^, rcDff»4fi*5*5=fc^ (9. 2k + 89. 2) 
M^ife5iim5o #Uxl{^^7^— fjfdtfS i 6 0 b-> h (k=16 0) 

x&n^ j»s-3ftc:^^t)-»tti 5 6 iMi^ 0 mFimmt 

20 2©^»>j^pjbfe^. mmi^-^it^m^ffommt vx^mmxz 

25 aQti,xmm(D%m&fto z.kiz£V) s ^n^n(D*x7—m&%:>kfoz>z.b 
&x%z> 0 
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IH3 3tjoV>-C, 1112 7(D^tl^ — f£f+ltg&2 7 0 1 fe£lT(D£ 5tLt, ^ 

tt r &m±x~^temmft j 3-x. btitc^zy urn^-r^o ^ # 7 — 

y MffiR &«§UhO,£J;i^mi-5o (^r^3 3 0 1) 0 # ? —fgff 

15 ^§13 2 7 0 2te^%?— ^S+»tH5 2 7 0 1 ^A^J ^tb^c^^ fe^t^tf R ft/^ 
m&U2 7 0 4#^glLfc^>'=M yM**R*!§LL<D,££Stt:i&5 (^^^^3 
3 0 2) 0 Kit;* tl 7 — j#ff 2 7 0 2«§:}tSlofc^^7— jttt^^^^ y 

20 ^7^3 3 0 4) 0 J^fl«7n^2 7 0 3 hfht^ >=fp< y^fR*^_hO^ 

# ^ — {§^(Dtt axtw r fomm^M 2 7 0 4 ^ «t 9 £ ^ =r^ y M*t 
Rftnio^i^y^ y^SR«±<^^^7-^©M^(Dia:7n^=fT^5 

(^^-/7°3 3 0 5) o mW&W&M^M2 7 0 511 M^TG^ 2 7 0 3IU 
25 R^-b^^^^-^^^-f-5 Uj-^3 3 0 6) o f£f+3f:£|S2 

701 ay^x/vv'a b7^MffiRft^±-e^^ffi^^^^p,tifc^^77— » 

**>7—mtW-%$2 7 0 1 ^ttSiijil*;*/^— f£ffj|g&2 7 0 
5S2I5 2 7 0 3^^i~§^-^=f^ y^tf Rft$Lh<7};*#^-f£frh3m N _L57RL/c 
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in 2 2« N in i <D^mMmm<D^mmi/x^j±%m&rEj&mw£ x^xmrn-f- 

5 S^cDHfj&^-fo [H i ©Rf-^MSgB 10 21^ [21 2 2 (Dm&ftf&mWi 2 2 0 
1 -m§-£g|5 2 2 0 2(^5 o El 2 8 ta s (H 2 2 ©«£fft£Mfc*3t*5*ra© 

[212 SfC^T, f^Wt2 2 0 1(^T©i5tLT, ^fc^y 
10 2 0 5^f>f^)}S^liiLT^5^ y-fe— ^2 2 0 6$rtii*t5o * yfe 

-v?2 2 0 5 lrf^Wi2 2 0 1 t 2 2 0 2»^lt 

&Ty?2 8 0 1) 0 2 0 2tt^^7 7— -fiflFfH)[SP2 2 0 3 figfy 

IfcoTc^ y-fe— 5?2 2 0 5lC^D-CtfRft^JbcD^^x.S (^T5'/2 8 0 
2 ) 0 7— 2203 tt^tiHRfettfls 2 2 0 4 J: Y) WHmr^tb -5 

15 ^^=7— m&$t\1rmZ> Ufy^2 8 0 3) „ -X# 7— ffiFftffgiS 2 2 0 3 

&ofc^RE&^ii©j&£*;*7^— H[ j: (9 — f^,&£if»L Urj/^2 8 0 

4) , ^*7-fM»2 2 0 2ti§ (^7*^2 8 0 5) 0 

2 2 0 2tt^^7— »tHf|FI52 2 0 3 J: 5 Sft&o fc^TJ 7— ffiFjfeSr £ \Z. LT 

20 "^2 2 0 6 i bT{±}^7t-S (^^5/^2 8 0 7) 0 

1 (12122(02202) ©^i-5&SK:o^Tlfcl§!i1-5o f^2 9 0 1i±, 
Xti* y^— S?3r$«-8t5 0 *€SB2 9 0 1 W: N y-fe— v>£ £ {c*»Rft 

lft_L©£*r»C* ^7- ^ff^2 9 0 2^t§Rft^_ho^^x. N ^LT^ 
25 #7-m§YW1®2 9 0 2^b^^7 7— ' flSF^Sr£tf-fl*5 0 Jf£S|S2 90 1it S»t 

k U-ctH^-fSo 

f^ff^fR2 902 (@22©2 2 0 3) ©J^fTi^^Q-SiteoV^T 
t^PJi-^o *7J^— fgfr#£|5 2 9 0 2I4, %r&U2 9 0 1 £ 9 *f R ftf&_L©j&§r 
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§f:m<5o *2>y—fe^mM2 9 o 2tt % W&ftmMtM2 9 0 3 £<o 7*7- 

— {g,S£tf-|fU m-%%$2 901 ^7*7— fg,&£5£-5 0 
5 *^i-»tf 2903 (0 22C922O4) ©^Ti-5*M^o^T 

tftBJ-rSo ?WMIfta5 2 9 0 3il 7*7- {^ff-^2 9 0 2^7*^— 
£rftlf-e#5J;5K:, 7 # 7 — M^r 7 * 7 — f&l+^ftf 2 9 0 2fci£3 0 

-ft tf 3?f|J 2 2 0 3 ^Hfli" 3 # ^ — {gf+JS % L fcB 1 ~m 2 

2 Tift f?>5 Ufc&<D^<7)^£ £ |x .5 o L #S o T r CO 7 7 — fg§ 

<Dfc$)W%U2 2 0 2j;i:fc>^-C N ^{«MS^tT^ 5"^(-, 7#^-f£,&6D^ 

ei 2 3 in 1 (D^mmjfm^^m^^^^m^tmmt i,rmm~tz> 
m^<DMj$ : k^-i-o m 1 cDBt^-M^ io2fi N 023 (DU^-i\MW. 2 3 0 1 -e 

15 2 3 0 2 i3Ufca o HI 3 0 }3\ 11 2 3 ©ffi-^b$l*K:*5»t5*aa©«tetLSr 

^f7P-ft-htfe5„ (213 1^ 02 3 0«-§-ftagiliJ:*3tt5^S©«KtL 

0 3 0 f^l^T, ffgf 2 30 1(j:^T©i?iat, btWt^ -y-fe— 
v>2 3 0 5fl>P>«-fHfc£Hfc.?< jy-fe— 2^2 3 0 6 ^rffiTJ-fSo ^ yfe*— S?2 3 0 
20 5 &tt-&3£«2 3 0 1 ^A^i~5 2 3 0 2^^^rgf«5 (7 7-5/ it* 

3 0 0 1) o m.^%2 3 0 2tt*;&^HEFtHP|£*B2 3 0 3^ft^ofc^ y-fcr— 
v?2 3 0 5KUC£C-C4tnftj»Jb©^tSr#^5 (7x^3 0 0 2) 0 7*^ — ffiF 
Srlt£R 2 3 0 3 tt|»|f f^ftSG 2 3 0 4 <fc <9 Wit-fe^^* 7— fjt^^it 

(^7^3 0 0 3) „ ^*9HSFtHF*P2 3 0 3 tegtfjfcofeff RMLL 
25 <Dj&bXfi7— iM£ 9 7*7 — tejfe&tWb Uf^/3 0 0 4) , ^©7*7 
— ffiF^S:«MJ2 3 0 2^5 (7t"s>7°3 0 0 5) 0 ^^5 2 3 0 2«^*^ 

— ASFtmEfp 2 3 0 3it) sttsio fc7*7-^^ t <b L^xm^tmm^ff^: 
5 (77-7/3 oo6). ^(Di&m&m^kzinfr* 2 30 6 1 u-cm 
^-rs (77^3 007) 0 
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01 (M2 3<D2 3 0 2) ©SEfrf 5&3ffitCo^TKBIi-r.5. m^itM 3 10 1 
fl At^ yi?— v^^tfl&So femtm 10 1lt A^jy yir — iic 
**Rft*ftJb©£«r»tf, X*? — {gf+Jf£|5 3 1 0 2I^RftH©^^t, ^ 
5 UT^^7 7-ffiFfJ-3fSfiJ3 1 0 2frh**7— fflFjfeSrSltJRSo U^itUS 10 1 

^^^^7 7—^1+^15 3 102 (12 302 30 3) ©llfr^'S&iJStelo^T 

I^P^i-^o *#9HSHH-3MB3 l o 2«\ 8WbgB3 l o l i^Rfti±^ 
10 £r^tfI&5o ^*7Hffff§|5 3 10211 3103J:i)^7 

7— ffiF/5%fWU «-S§-<fcg&3 l 0 lic^^7 7— ffiFjfe^5 0 
*«tcaM6fflfa«BttfiK3 103 (EI23CD230 4) OgfefTi-SMSiCo^T 
15 Ife§g-r5o &ftft$#H(feg|: 3 10 3(1 ^*7- f^f+^3 1 0 2^7*7^ 

^777-^ff^$B2 3 0 3dS^ffi-S^^7-^tf-»tt. ±J$Lfcf 1-12 
20 2 3 0 2fcL*3VVT\ tt-^fb«KffiSrfr*5»^s m&<D^,± 

25 :£T©Bt-5^g£frft5 rt^t§ 0 
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7 7J 7 — flfiLRtW* R ft*6Jb®/SW> r 3 ^^7 — 7*7 — ffiPff ^^^fe 
5 ffeot, 

fulfil # 9 — fflf/S©«P^flWllSrtH|[-r5 ^r^yi, ififE* # 7 — f&jfe<o|SB^ 
ft & ^^M^^Tc-r S XTiy7t £^tfr § 7 tj 7 — fflFW- #^feo 

2. H R ft^Bf #K:53tt 5 ^Jr©^P£#Jh;£« £;ft,fc*tR ft^^ jo V 

^^7 — ItXtKffi R fti&±©^ ?>^*7 — fflF^SrtW-T S ^*7 -{^f+^^-fe 
10 t'feot, 

15 ^*7 — «3ttW»R ft;l§Lh<M;&> 7 X 7 — ffifjfe Srfff Jf i~ S * # 7 — <^f+»^fe 
T'&oT. M§57^7 7 W£^£i^lf $B£f^i~3 7 ^ 7 ^ . Sfrf5^^7 7 — 
f£;£<D£]S5>'l*»> bJtJ&ffi*H:*5V ^T^fc^gS Sr^Tn-f -5 x^-y^k. &JfPZ>. 

20 iftiiKi&v^ ^*7- «t>^V=f^ yMltRftM-h0^b^^7— fflF^CSr 

i-m-?- & 7 ^7 7 H»tmt*&-c fc o T , 

f&IE77J 7— ^6<£>fB#ff n*ft^irZ>xT y7b . tuf57i7 7— fg,&<D£|^ 
b^*J6*Sr«5ni-5 * 7 7 7° t £^37 tj 7 -^f+ jlTjfe, 

5. ttRft^Bt^C^(tS^5^±(D^PI#:Ji^^n^y^^-^>^ f7 
25 ^IffiRWi^^T, 7# 7—\KBlW'< h7^iiRiIJ:0^^ 

^ 7 7 *H&& 5 * # 7 -HIH^tfcoT, 
ituf57 7J 7 — fg,&CD|Ffl;$Hf ^^rff^i - 5^f-;/^ HU1E7 # 7 — f&&cO|fB# 

6. »R*j»l*#»ci3»t5#»5»JhO^IS#Jb«ifc*n*:*>^ yS9*R 
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# 7 -§^©xiiit)! z jgstMiwciiirsB* * 7 — «^ t striae- 7 =r* y §m* r 

tmt-f £ * # 7 -HSFfUf^rifeT o t , 

timt i^x^mmmx^-x. hntcmm*^ ^—mMvxmm&xjtzmm&mzm 
^ Sr^r-f s * 7 Hfctf-ifc^ife. 

15 8. ♦»Rft«lBWfc^tt**ft5KJb©^I^Jb^it*^fc^>'=fp« USlfllR 

■urn t vxmmmmx-^-^ btnttm** 7 —fc&vxmmR&zmm* mm* 

25 ftj»»c*5V ^T, 7 7J 7 HH^tf* 7 =f 7: y Mffi R J&jSJb©^ 7 7J 7 — ffiF^i Sr 
ftW-f § 7 77 7 -flSFtMI^-Cfc o T\ 
Utiles 77 7 ^^(^|FP5>if ft SrW-^i- 5 7 7 7 7° i: % fulfil # 7 — fflfjfe <£>gfc£ 

ffiMKi: UTltf^M^T^^^nfCBUfB7 77 7-^<DXM^T^Z^. BUffi7 
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t^mm^mTu-r ^^v-ft* =#-r & 7 * 7 -^nnijm 0 

10. ^RAa^^{t^^5i^±cDW(5S#:-b^$ixfc^>=?V y§Mf R 

tf w-f & 7 # t? — mnwjjfex •& o x , 

iuf27 7J 7— f&^cD^P^tf $g^rf+^i-5 7^r y 7°£ % fuf37;fc 7— {£;&©lr|5# 

iiuf57 77 5 — ffiF^©$P4>fll^ tflf -f - S 7. 7 s - 7 7° £ , Mfe7 77 7 — flSFjfe Og|3^ 
it S Xlg^t^Z M^^O'tCiulST. 77 7 — ffiF/S £ fulB !7 h 7 *M 

w ^mm k& v n r ^ *ffiaisr«5c"t- 5^777°^ <sr^-r 5 7 # 7 — f^t+»77 fe G 

12. ffiRft^Bf^fe*tS«^5^±©^PS#:Ji^gS$nyt!7^3c^'>3. h=7 
^aflfR*j»*C*5V^T, 77>7—fit^O ? !7-Y^7l-i>'^ h 7*S*#RftlSLh©jft;&> 
M*7 —ftFJ& £f+ 7 # 7 — fflF«"J|L^feT?S) o T % 
25 tfflB7^7— flJ/S©SR^flMRS:«-Jfi- S^fyT" ftul57^ 7— f&j&©*&$> 
HMRt UTlt^«T'^^btlfcBulB7^7--f§^OXM^t^ZM^s jtufB7 
77 7 — t HifflB JM 3c/u->3. h 7 *S**R ftJKLh©jft&JDj|£ Lfc;fe©ttSM« 
^^it^X^S.t> ? Z^MtMc:Sirl5777 7— £ HUfB^-r^V^^. h77l 
m R ft l&Jh © Sr^m L £ <Dtti&mm \z. 33 ft 5 x J&gfcR. t>* Z Ml x. % M J£ 
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13. mRmum^ic^n ^mms sx±(Dmm±mm^ntc9^ j>7 

7 # 7 H» A SrtHM- 3 7 # 7 — flSff^^fe t? fooTs 
10 ±i£JSm ZOLjc-t Z^TyZfk 7 # 7 — ffiFff»*fe 0 

14. nm^m^^^n ^±(D^mi^±.^m^titz.TP 4 

tfrlB^m/w:^ h^^SlfllRftj|ftSr*^=r^ y Mff RftHic^m-TS 77" 7 
15 -?k . v =r 7: y MtfR Attics it§^*7 — fflFj&©SB#1* «SrtH|[-rs 7r>; 
7° t % aulE^e >-=?y. V M*t R ft jR fcia it S * # 7 — fg^^C CD^^ff$g a^^^A- 

15. ffiRftaBt#^^^S«^5^_b©^P»_b^^tbfcl7^^^v'^ 

20 7iM*fRftHi-*3V^T, 7#7~ fitS-U^-f^A-v^ b7^S||RftH±©^^ 
«b 7 7J 7 —fflF^i Srff-»i" S 7 7J 7 — fflFth IT^feT* fe o T , 

7°£, y^fRM{Cio{tS77J7W^^^Hf^^i+#i-^^77 

25 y3ytfRfta}-jov^-c^/ c eJffitf^7^-r-5^7 i 7 7 D i N ijfs^-^^ yi*R 

R g^i^ #3 7 ^ft»i-5 7 Tyfk *miTZ> 7 # 7 -^l+»7jfe 

16. ^Rft0^^{tS^5^±^P5#:Ji^a^^7t7^^/l-i7 3 . h7 
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ttmz.mm* * 9 *H»j£ S«R &i»-fc© Jf Ufcj&©*HI»Hi 

-f tuis it S ^ftJte««rtt5ci- 5 * ^ y Sr^Tt" § ^ 7^ 7 — f$f+»^fe 0 

17. ^Rft^Ht^{^{ta^5^±^IS#:Ji^^^fc!7^^/>^^ 

t , Bute^ ^ =f * v mmn&mz&if z> * # ? at^^ 

15 ySi*IIR**SiHij3v>T*tj^MS-e-^iLe>tt*:^^9— fSPjfe©XJffi«Xr5ZM« 

18. «fRft^Bf^^»tS«*5W±O^Pfi^Ji^$tbyb!7^ai/^3. h7 
20 7S|SRiii3^r, ^^^Rtf^^/i^^, h^^SffiRlftljUKO^ 

b7*7 -HSF^SrW-JiC-r 5 7 — ^Fff-3?^rfe-efe o 
fulfil h 9 *St»R yi«Rft«^f57T 5 ' 

25 ^ ysifliRftj»»3i*5v^jt*jaE*t?#*.bn*:^^7— f&^xMm&tfzj^^ 

fulfil 7J 7 H*j6 £ =r* V mm R *a±^^^P# Lfc,£<Dttf^©ii£:fc 
5 Xl©t; Z ffi^M tMcfufE^ # 7 — ffiFj^C H7d> p ISfllR ft,HLk<D,£ ^ 

R ft # v ^ t T Z7 j i^mm m*s »t 5 ££&l£IK Z'&tcIt zxTyT't&Jrrz 
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19. ffiw&m\$^&tf&mm5u±<D^mfc±7&m&iritii74^i'i'=. hy 
h^y ^m-if-r s * # y -mu m?mx-& o t % 

^ y Mtt r ftni^v ^-nt^M^i^x. bintc* x y -i&&<Dx&mATf z mm. 

R ft WUZ 33 V ^TMf«^l id 33 ft 5 5fe££JS^I ^myu-T Z> ^Ty-7h?k ^f-f ^ ^ ^ 

20. tiRfta^i-33{t§^m5^_b(D^rpg^_b^a§tL/cy-r^yw>^ hy 

-fh, fufS^V^ y^*tRAH^33^S^^^— fl££©*B5Hff«£ LT^y^ 
20 y §M#Rftlil£33V^TT^-f yl^t^tb^fc7*7" f&^©xll, ittjfB 

77^ ^jffi«Hl33ttS xlg^i 57 -^/W^ h7^MfflRftj^^33V>TT 
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